Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature.authorization rbac #326

Merged
merged 68 commits into from
Mar 12, 2024
Merged

Feature.authorization rbac #326

merged 68 commits into from
Mar 12, 2024

Commits on Nov 14, 2023

  1. Added roles etc to security

    josephine-jc committed Nov 14, 2023
    Configuration menu
    Copy the full SHA
    424a25b View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2023

  1. Rbac +testing

    @Josephine-Rutten
    Josephine-Rutten committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    9838f8c View commit details
    Browse the repository at this point in the history

Commits on Dec 4, 2023

  1. Merge branch 'SUNET:develop' into feature.authorization

    @Josephine-Rutten
    Josephine-Rutten authored Dec 4, 2023
    Configuration menu
    Copy the full SHA
    7e6220f View commit details
    Browse the repository at this point in the history

  2. reformat

    @Josephine-Rutten
    Josephine-Rutten committed Dec 4, 2023
    Configuration menu
    Copy the full SHA
    a2dc12a View commit details
    Browse the repository at this point in the history

  3. example permissions

    @Josephine-Rutten
    Josephine-Rutten committed Dec 4, 2023
    Configuration menu
    Copy the full SHA
    13d291b View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2023

  1. Changes backend review Peter

    @Josephine-Rutten
    Josephine-Rutten committed Dec 5, 2023
    Configuration menu
    Copy the full SHA
    af65f91 View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2023

  1. worked on unit tests and improved the short uri

    @Josephine-Rutten
    Josephine-Rutten committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    b0cc14a View commit details
    Browse the repository at this point in the history

  2. Update app_settings.py

    @Josephine-Rutten
    Josephine-Rutten committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    19970c5 View commit details
    Browse the repository at this point in the history

  3. format app.py

    @Josephine-Rutten
    Josephine-Rutten committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    ff3ef44 View commit details
    Browse the repository at this point in the history

  4. Use token type

    @Josephine-Rutten
    Josephine-Rutten committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    cd06d30 View commit details
    Browse the repository at this point in the history

  5. AssertTrue & False instead of AssertEqual

    @Josephine-Rutten
    Josephine-Rutten committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    eaeb8c6 View commit details
    Browse the repository at this point in the history

Commits on Dec 13, 2023

  1. Tried to decode jwt token without algorithm. Didn't work. 

    I thought I tested it well enough yesterday, but today with working on the frontend I ran into bugs logging in. So we are getting the algorithm from the header again.
    @Josephine-Rutten
    Josephine-Rutten committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    a3ceb85 View commit details
    Browse the repository at this point in the history

Commits on Dec 18, 2023

  1. Made the data in errors into messages and changed error codes on not … 

    …enough rights
    @Josephine-Rutten
    Josephine-Rutten committed Dec 18, 2023
    Configuration menu
    Copy the full SHA
    33faca6 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'feature.authenticationwithoauth' into feature.authoriza… 

    …tion
    @Josephine-Rutten
    Josephine-Rutten committed Dec 18, 2023
    Configuration menu
    Copy the full SHA
    a481e13 View commit details
    Browse the repository at this point in the history

Commits on Dec 19, 2023

  1. Bad merge, default permissions bug, no permission bug

    @Josephine-Rutten
    Josephine-Rutten committed Dec 19, 2023
    Configuration menu
    Copy the full SHA
    a7e075e View commit details
    Browse the repository at this point in the history

Commits on Jan 8, 2024

  1. Merge branch 'feature.authenticationwithoauth' into feature.authoriza… 

    …tion
    @Josephine-Rutten
    Josephine-Rutten committed Jan 8, 2024
    Configuration menu
    Copy the full SHA
    5716557 View commit details
    Browse the repository at this point in the history

Commits on Jan 11, 2024

  1. Merge branch 'feature.authenticationwithoauth' into feature.authoriza… 

    …tion
    @Josephine-Rutten
    Josephine-Rutten committed Jan 11, 2024
    Configuration menu
    Copy the full SHA
    0599de8 View commit details
    Browse the repository at this point in the history

Commits on Jan 15, 2024

  1. use token type

    @Josephine-Rutten
    Josephine-Rutten committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    80ed6be View commit details
    Browse the repository at this point in the history

  2. Merge branch 'feature.authenticationwithoauth' into feature.authoriza… 

    …tion
    @Josephine-Rutten
    Josephine-Rutten committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    963737a View commit details
    Browse the repository at this point in the history

  3. small code changes, bugfix socket_connect, permissions_disabled in co… 

    …nf, remove unneccersary lib
    @Josephine-Rutten
    Josephine-Rutten committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    149c9b3 View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2024

  1. Add permissions yaml to the docker config and add documentation for t… 

    …he yaml
    @Josephine-Rutten
    Josephine-Rutten committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    506e546 View commit details
    Browse the repository at this point in the history

  2. dic instead of array

    @Josephine-Rutten
    Josephine-Rutten committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    0bcff8b View commit details
    Browse the repository at this point in the history

  3. Update app_settings.py

    @Josephine-Rutten
    Josephine-Rutten committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    e349814 View commit details
    Browse the repository at this point in the history

Commits on Jan 17, 2024

  1. Small changes based on own code review

    @Josephine-Rutten
    Josephine-Rutten committed Jan 17, 2024
    Configuration menu
    Copy the full SHA
    fa76112 View commit details
    Browse the repository at this point in the history

  2. bugfix based on unittests

    @Josephine-Rutten
    Josephine-Rutten committed Jan 17, 2024
    Configuration menu
    Copy the full SHA
    7c5f647 View commit details
    Browse the repository at this point in the history

  3. Combine conditions with same result

    @Josephine-Rutten
    Josephine-Rutten committed Jan 17, 2024
    Configuration menu
    Copy the full SHA
    b874216 View commit details
    Browse the repository at this point in the history

Commits on Jan 18, 2024

  1. Bugfix: security

    @Josephine-Rutten
    Josephine-Rutten committed Jan 18, 2024
    Configuration menu
    Copy the full SHA
    4f5db2f View commit details
    Browse the repository at this point in the history

  2. Merge dev into branch

    @Josephine-Rutten
    Josephine-Rutten committed Jan 18, 2024
    Configuration menu
    Copy the full SHA
    5eabdd5 View commit details
    Browse the repository at this point in the history

  3. Bug for the audience

    @Josephine-Rutten
    Josephine-Rutten committed Jan 18, 2024
    Configuration menu
    Copy the full SHA
    e486911 View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2024

  1. Include permissions in docker

    @Josephine-Rutten
    Josephine-Rutten committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    db8444b View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'upstream/develop' into feature.authoriz… 

    …ation
    @Josephine-Rutten
    Josephine-Rutten committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    7febf9a View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2024

  1. AUDIENCE in auth_settings should be optional str 

    authlib.oauth2.rfc6749.wrappers import HttpRequest not found,
 replace with authlib.oauth2.rfc6749.requests import OAuth2Request ??
Run pre-commit hooks to format files
    @indy-independence
    indy-independence committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    1cd1bfc View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2024

  1. Pydantic checking of the permissions.yaml

    josephine-jc committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    0e632de View commit details
    Browse the repository at this point in the history

  2. Made glob notation less general

    josephine-jc committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    4f3ba69 View commit details
    Browse the repository at this point in the history

  3. save on number of docker build steps, similar to earlier optimizations 

    by morten
    @indy-independence
    indy-independence committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    02cd433 View commit details
    Browse the repository at this point in the history

  4. change rbac.py to use new permissions structure and make use of typing 

    from pydantic
    @indy-independence
    indy-independence committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    8ffa685 View commit details
    Browse the repository at this point in the history

  5. Merge branch 'feature.authorization' of github.com:Josephine-Rutten/c… 

    …naas-nms into feature.authorization
    @indy-independence
    indy-independence committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    2ff20ca View commit details
    Browse the repository at this point in the history

Commits on Feb 5, 2024

  1. Updated unit test + small code fixes + pre-commit

    Josephine committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    4748e7c View commit details
    Browse the repository at this point in the history

  2. Precommit retry

    Josephine committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    34ab9bb View commit details
    Browse the repository at this point in the history

  3. made the rules for unti test 2 vars instead of defining them for ever… 

    …y single test
    @Josephine-Rutten
    Josephine-Rutten committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    e26e374 View commit details
    Browse the repository at this point in the history

  4. small fixes based on sonarcloud

    @Josephine-Rutten
    Josephine-Rutten committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    3d6d5d8 View commit details
    Browse the repository at this point in the history

  5. last change based on sonarcloud

    @Josephine-Rutten
    Josephine-Rutten committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    75aaa03 View commit details
    Browse the repository at this point in the history

  6. Small bug fix + tests changed to check for that bug in the future

    @Josephine-Rutten
    Josephine-Rutten committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    a2e7e4b View commit details
    Browse the repository at this point in the history

  7. fix verify_audience setting 

    make sure to read permission_disabled setting from file before building
default rules
    @indy-independence
    indy-independence committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    79a47ec View commit details
    Browse the repository at this point in the history

  8. Merge branch 'develop' into feature.authorization

    @Josephine-Rutten
    Josephine-Rutten committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    be3da89 View commit details
    Browse the repository at this point in the history

  9. Merge branch 'feature.authorization' of github.com:Josephine-Rutten/c… 

    …naas-nms into feature.authorization
    @indy-independence
    indy-independence committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    f0560d9 View commit details
    Browse the repository at this point in the history

Commits on Feb 13, 2024

  1. use requests session to take advantage of http keepalive/pipelineing … 

    …to help performance a bit with two connections to the same host
    @indy-independence
    indy-independence committed Feb 13, 2024
    Configuration menu
    Copy the full SHA
    209f9bf View commit details
    Browse the repository at this point in the history

Commits on Feb 14, 2024

  1. Add redis cache of oidc userinfo data so we don't need to query ident… 

    …ity server for every request. This makes the API a lot more responsive
    @indy-independence
    indy-independence committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    af576da View commit details
    Browse the repository at this point in the history

Commits on Feb 15, 2024

  1. fix request logging with email from userinfo

    @indy-independence
    indy-independence committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    34b2287 View commit details
    Browse the repository at this point in the history

  2. fix import error when not using oidc_enabled

    @indy-independence
    indy-independence committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    f64ce1a View commit details
    Browse the repository at this point in the history

Commits on Feb 16, 2024

  1. validate token for websockets to get sub -> userinfo to log user email

    @indy-independence
    indy-independence committed Feb 16, 2024
    Configuration menu
    Copy the full SHA
    3ceac57 View commit details
    Browse the repository at this point in the history

Commits on Feb 22, 2024

  1. don't log any query params for /auth/ endpoints. allow cookies to be … 

    …set/sent, to be used for the /auth/refresh endpoint
    @indy-independence
    indy-independence committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    6569092 View commit details
    Browse the repository at this point in the history

  2. Add email param to callback, and add refresh_token as httpOnly cookie to 

    the callback as well
Add /auth/refresh API endpoint to support using refresh_tokens
    @indy-independence
    indy-independence committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    f4a82c8 View commit details
    Browse the repository at this point in the history

  3. query token introspection endpoint if userinfo is not available, to b… 

    …e compatible with client_credentials type clients
    @indy-independence
    indy-independence committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    6745c6d View commit details
    Browse the repository at this point in the history

  4. did not mean to commit this ssl config for the dev server

    @indy-independence
    indy-independence committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    6c3061b View commit details
    Browse the repository at this point in the history

Commits on Feb 23, 2024

  1. Merge branch 'develop' into feature.authorization

    @indy-independence
    indy-independence committed Feb 23, 2024
    Configuration menu
    Copy the full SHA
    9284d80 View commit details
    Browse the repository at this point in the history

Commits on Feb 27, 2024

  1. add configurable attribute to use as username from OIDC tokens instea… 

    …d of hardcoding to email
    @indy-independence
    indy-independence committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    8f00d01 View commit details
    Browse the repository at this point in the history

Commits on Feb 28, 2024

  1. make dhcp hook try using OAUTH_CLIENT_ID etc if JWT_AUTH_TOKEN is not… 

    … set
    @indy-independence
    indy-independence committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    4380f16 View commit details
    Browse the repository at this point in the history

Commits on Feb 29, 2024

  1. formatting + code cleanup

    Josephine committed Feb 29, 2024
    Configuration menu
    Copy the full SHA
    739c603 View commit details
    Browse the repository at this point in the history

  2. formatting + code cleanup security

    Josephine committed Feb 29, 2024
    Configuration menu
    Copy the full SHA
    d774064 View commit details
    Browse the repository at this point in the history

Commits on Mar 1, 2024

  1. seperate security.py into multiple different files

    Josephine committed Mar 1, 2024
    Configuration menu
    Copy the full SHA
    9c300cb View commit details
    Browse the repository at this point in the history

  2. Make typing a bit more strict, make sure introspect token data is ret… 

    …urned, run dos2unix for fixing line endings
    @indy-independence
    indy-independence committed Mar 1, 2024
    Configuration menu
    Copy the full SHA
    0d7ba7b View commit details
    Browse the repository at this point in the history

Commits on Mar 4, 2024

  1. fix logic so introspect endpoint will be called on HTTPError

    @indy-independence
    indy-independence committed Mar 4, 2024
    Configuration menu
    Copy the full SHA
    f04d2bc View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2024

  1. update docs for changes in permissions.yml

    @indy-independence
    indy-independence committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    c2ce5cb View commit details
    Browse the repository at this point in the history

  2. don't log 'permissions disabled' with every API call if disabled

    @indy-independence
    indy-independence committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    29ac456 View commit details
    Browse the repository at this point in the history

  3. add dummy integrationtest JWT_SECRET_KEY

    @indy-independence
    indy-independence committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    1af667f View commit details
    Browse the repository at this point in the history

  4. docker compose env var for JWT_SECRET_KEY

    @indy-independence
    indy-independence committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    87fe766 View commit details
    Browse the repository at this point in the history

  5. increase apscheduler misfire_grace_time from 1 to 5 seconds, seems to… 

    … be needed with multiprocess integrationtests
    @indy-independence
    indy-independence committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    7172253 View commit details
    Browse the repository at this point in the history