Code

Feature.authorization rbac#326

Code

Merged

indy-independence merged 68 commits intoSUNET:developSUNET/cnaas-nms:developfrom Josephine-Rutten:feature.authorizationJosephine-Rutten/cnaas-nms:feature.authorizationCopy head branch name to clipboardMar 12, 2024

+859-175

Commits

Commits on Nov 14, 2023

• Added roles etc to security

  

  josephine-jc

  committed
  424a25b

  Copy full SHA for 424a25b

Commits on Dec 1, 2023

• Rbac +testing

  Josephine-Rutten

  committed
  9838f8c

  Copy full SHA for 9838f8c

Commits on Dec 4, 2023

• Merge branch 'SUNET:develop' into feature.authorization

  Josephine-Rutten

  authored
  7e6220f

  Copy full SHA for 7e6220f

• reformat

  Josephine-Rutten

  committed
  a2dc12a

  Copy full SHA for a2dc12a

• example permissions

  Josephine-Rutten

  committed
  13d291b

  Copy full SHA for 13d291b

Commits on Dec 5, 2023

• Changes backend review Peter

  Josephine-Rutten

  committed
  af65f91

  Copy full SHA for af65f91

Commits on Dec 12, 2023

• worked on unit tests and improved the short uri

  Josephine-Rutten

  committed
  b0cc14a

  Copy full SHA for b0cc14a

• Update app_settings.py

  Josephine-Rutten

  committed
  19970c5

  Copy full SHA for 19970c5

• format app.py

  Josephine-Rutten

  committed
  ff3ef44

  Copy full SHA for ff3ef44

• Use token type

  Josephine-Rutten

  committed
  cd06d30

  Copy full SHA for cd06d30

• AssertTrue & False instead of AssertEqual

  Josephine-Rutten

  committed
  eaeb8c6

  Copy full SHA for eaeb8c6

Commits on Dec 13, 2023

• Tried to decode jwt token without algorithm. Didn't work.

  Show description for a3ceb85
  Josephine-Rutten

  committed
  a3ceb85

  Copy full SHA for a3ceb85

Commits on Dec 18, 2023

• Made the data in errors into messages and changed error codes on not enough rights

  Josephine-Rutten

  committed
  33faca6

  Copy full SHA for 33faca6

• Merge branch 'feature.authenticationwithoauth' into feature.authorization

  Josephine-Rutten

  committed
  a481e13

  Copy full SHA for a481e13

Commits on Dec 19, 2023

• Bad merge, default permissions bug, no permission bug

  Josephine-Rutten

  committed
  a7e075e

  Copy full SHA for a7e075e

Commits on Jan 8, 2024

• Merge branch 'feature.authenticationwithoauth' into feature.authorization

  Josephine-Rutten

  committed
  5716557

  Copy full SHA for 5716557

Commits on Jan 11, 2024

• Merge branch 'feature.authenticationwithoauth' into feature.authorization

  Josephine-Rutten

  committed
  0599de8

  Copy full SHA for 0599de8

Commits on Jan 15, 2024

• use token type

  Josephine-Rutten

  committed
  80ed6be

  Copy full SHA for 80ed6be

• Merge branch 'feature.authenticationwithoauth' into feature.authorization

  Josephine-Rutten

  committed
  963737a

  Copy full SHA for 963737a

• small code changes, bugfix socket_connect, permissions_disabled in conf, remove unneccersary lib

  Josephine-Rutten

  committed
  149c9b3

  Copy full SHA for 149c9b3

Commits on Jan 16, 2024

• Add permissions yaml to the docker config and add documentation for the yaml

  Josephine-Rutten

  committed
  506e546

  Copy full SHA for 506e546

• dic instead of array

  Josephine-Rutten

  committed
  0bcff8b

  Copy full SHA for 0bcff8b

• Update app_settings.py

  Josephine-Rutten

  committed
  e349814

  Copy full SHA for e349814

Commits on Jan 17, 2024

• Small changes based on own code review

  Josephine-Rutten

  committed
  fa76112

  Copy full SHA for fa76112

• bugfix based on unittests

  Josephine-Rutten

  committed
  7c5f647

  Copy full SHA for 7c5f647

• Combine conditions with same result

  Josephine-Rutten

  committed
  b874216

  Copy full SHA for b874216

Commits on Jan 18, 2024

• Bugfix: security

  Josephine-Rutten

  committed
  4f5db2f

  Copy full SHA for 4f5db2f

• Merge dev into branch

  Josephine-Rutten

  committed
  5eabdd5

  Copy full SHA for 5eabdd5

• Bug for the audience

  Josephine-Rutten

  committed
  e486911

  Copy full SHA for e486911

Commits on Jan 29, 2024

• Include permissions in docker

  Josephine-Rutten

  committed
  db8444b

  Copy full SHA for db8444b

• Merge remote-tracking branch 'upstream/develop' into feature.authorization

  Josephine-Rutten

  committed
  7febf9a

  Copy full SHA for 7febf9a

Commits on Jan 31, 2024

• AUDIENCE in auth_settings should be optional str

  Show description for 1cd1bfc
  indy-independence

  committed
  1cd1bfc

  Copy full SHA for 1cd1bfc

Commits on Feb 1, 2024

• Pydantic checking of the permissions.yaml

  

  josephine-jc

  committed
  0e632de

  Copy full SHA for 0e632de

• Made glob notation less general

  

  josephine-jc

  committed
  4f3ba69

  Copy full SHA for 4f3ba69

• save on number of docker build steps, similar to earlier optimizations

  Show description for 02cd433
  indy-independence

  committed
  02cd433

  Copy full SHA for 02cd433

• change rbac.py to use new permissions structure and make use of typing

  Show description for 8ffa685
  indy-independence

  committed
  8ffa685

  Copy full SHA for 8ffa685

• Merge branch 'feature.authorization' of github.com:Josephine-Rutten/cnaas-nms into feature.authorization

  indy-independence

  committed
  2ff20ca

  Copy full SHA for 2ff20ca

Commits on Feb 5, 2024

• Updated unit test + small code fixes + pre-commit

  

  Josephine

  committed
  4748e7c

  Copy full SHA for 4748e7c

• Precommit retry

  

  Josephine

  committed
  34ab9bb

  Copy full SHA for 34ab9bb

• made the rules for unti test 2 vars instead of defining them for every single test

  Josephine-Rutten

  committed
  e26e374

  Copy full SHA for e26e374

• small fixes based on sonarcloud

  Josephine-Rutten

  committed
  3d6d5d8

  Copy full SHA for 3d6d5d8

• last change based on sonarcloud

  Josephine-Rutten

  committed
  75aaa03

  Copy full SHA for 75aaa03

• Small bug fix + tests changed to check for that bug in the future

  Josephine-Rutten

  committed
  a2e7e4b

  Copy full SHA for a2e7e4b

• fix verify_audience setting

  Show description for 79a47ec
  indy-independence

  committed
  79a47ec

  Copy full SHA for 79a47ec

• Merge branch 'develop' into feature.authorization

  Josephine-Rutten

  committed
  be3da89

  Copy full SHA for be3da89

• Merge branch 'feature.authorization' of github.com:Josephine-Rutten/cnaas-nms into feature.authorization

  indy-independence

  committed
  f0560d9

  Copy full SHA for f0560d9

Commits on Feb 13, 2024

• use requests session to take advantage of http keepalive/pipelineing to help performance a bit with two connections to the same host

  indy-independence

  committed
  209f9bf

  Copy full SHA for 209f9bf

Commits on Feb 14, 2024

• Add redis cache of oidc userinfo data so we don't need to query identity server for every request. This makes the API a lot more responsive

  indy-independence

  committed
  af576da

  Copy full SHA for af576da

Commits on Feb 15, 2024

• fix request logging with email from userinfo

  indy-independence

  committed
  34b2287

  Copy full SHA for 34b2287

• fix import error when not using oidc_enabled

  indy-independence

  committed
  f64ce1a

  Copy full SHA for f64ce1a

Commits on Feb 16, 2024

• validate token for websockets to get sub -> userinfo to log user email

  indy-independence

  committed
  3ceac57

  Copy full SHA for 3ceac57

Commits on Feb 22, 2024

• don't log any query params for /auth/ endpoints. allow cookies to be set/sent, to be used for the /auth/refresh endpoint

  indy-independence

  committed
  6569092

  Copy full SHA for 6569092

• Add email param to callback, and add refresh_token as httpOnly cookie to

  Show description for f4a82c8
  indy-independence

  committed
  f4a82c8

  Copy full SHA for f4a82c8

• query token introspection endpoint if userinfo is not available, to be compatible with client_credentials type clients

  indy-independence

  committed
  6745c6d

  Copy full SHA for 6745c6d

• did not mean to commit this ssl config for the dev server

  indy-independence

  committed
  6c3061b

  Copy full SHA for 6c3061b

Commits on Feb 23, 2024

• Merge branch 'develop' into feature.authorization

  indy-independence

  committed
  9284d80

  Copy full SHA for 9284d80

Commits on Feb 27, 2024

• add configurable attribute to use as username from OIDC tokens instead of hardcoding to email

  indy-independence

  committed
  8f00d01

  Copy full SHA for 8f00d01

Commits on Feb 28, 2024

• make dhcp hook try using OAUTH_CLIENT_ID etc if JWT_AUTH_TOKEN is not set

  indy-independence

  committed
  4380f16

  Copy full SHA for 4380f16

Commits on Feb 29, 2024

• formatting + code cleanup

  

  Josephine

  committed
  739c603

  Copy full SHA for 739c603

• formatting + code cleanup security

  

  Josephine

  committed
  d774064

  Copy full SHA for d774064

Commits on Mar 1, 2024

• seperate security.py into multiple different files

  

  Josephine

  committed
  9c300cb

  Copy full SHA for 9c300cb

• Make typing a bit more strict, make sure introspect token data is returned, run dos2unix for fixing line endings

  indy-independence

  committed
  0d7ba7b

  Copy full SHA for 0d7ba7b

Commits on Mar 4, 2024

• fix logic so introspect endpoint will be called on HTTPError

  indy-independence

  committed
  f04d2bc

  Copy full SHA for f04d2bc

Commits on Mar 11, 2024

• update docs for changes in permissions.yml

  indy-independence

  committed
  c2ce5cb

  Copy full SHA for c2ce5cb

• don't log 'permissions disabled' with every API call if disabled

  indy-independence

  committed
  29ac456

  Copy full SHA for 29ac456

• add dummy integrationtest JWT_SECRET_KEY

  indy-independence

  committed
  1af667f

  Copy full SHA for 1af667f

• docker compose env var for JWT_SECRET_KEY

  indy-independence

  committed
  87fe766

  Copy full SHA for 87fe766

• increase apscheduler misfire_grace_time from 1 to 5 seconds, seems to be needed with multiprocess integrationtests

  indy-independence

  committed
  7172253

  Copy full SHA for 7172253