Gero Posmyk-Leinemann
96df901870
[server] Fix handling of multiple session cookies with the same name ( #19456 )
...
* [server] Fix handling of multiple session cookies with the same name
* [public-api-server] Fix handling of multiple session cookies with the same name
* Ensure exact same behavior as before in jwtSessionConvertor
2024-02-22 11:48:03 +02:00
Milan Pavlik
fcb8c5f79d
[papi] Extract JWT cookie when extracting creds ( #17875 )
...
* [papi] Extract JWT cookie when extracting creds
* fix
* fix
* fix
* Fix
* fix
* Update components/public-api-server/pkg/auth/middleware.go
Co-authored-by: Gero Posmyk-Leinemann <32448529+geropl@users.noreply.github.com>
---------
Co-authored-by: Gero Posmyk-Leinemann <32448529+geropl@users.noreply.github.com>
2023-06-14 15:37:04 +08:00
Milan Pavlik
9937cd864d
[go] Remove jwtSessions feature flag ( #17867 )
2023-06-08 15:29:58 +08:00
Milan Pavlik
12b2e2d116
[papi] Remove rogue print from PAT tests ( #17663 )
2023-05-19 17:17:53 +08:00
Milan Pavlik
0dc46c5bcc
[public-api] Measure incoming JWT Sessions - WEB-102 ( #17345 )
...
* retest
* retest
* [installer] Add cookie name to config
* Fix
* retest
* [installer] Add cookie name to config
* [public-api] Measure incoming JWT Sessions
* fix
* Fix
* Fix
* fix
* retest
2023-04-24 21:34:45 +08:00
Milan Pavlik
d069f76edc
[public-api] Refactor JWT Sign/Verify to be reusable for OIDC - WEB-206 ( #17327 )
...
* [public-api] Refactor JWT Sign/Verify to be reusable for OIDC
* fix
2023-04-24 15:14:45 +08:00
Milan Pavlik
4f55ce16da
[public-api] JWT Signer & Verifier WEB-101 ( #17308 )
...
* [public-api] JWT Signer & Verifier
* upgrade other to v5
2023-04-21 17:32:42 +08:00
Milan Pavlik
0a7ca4c08a
Use context to store and populate origin
2023-02-15 15:39:20 +01:00
Gero Posmyk-Leinemann
1a9094756a
[public-api-server] Forward Origin header where provided
2023-02-15 15:39:20 +01:00
mustard
e82fe80af9
[public-api] add workspaceStatus stream rpc
2023-01-09 10:59:48 +01:00
Christian Weichel
478a75e744
Switch license to AGPL
2022-12-08 13:05:19 -03:00
Milan Pavlik
4ebb30d4d9
[pat] Store hash as sha256 instead of bcrypt
2022-11-28 14:51:57 -03:00
Milan Pavlik
e15c78b82f
[pat] Reduce bcrypt cost to 10
2022-11-23 05:23:53 -03:00
Milan Pavlik
4913d48793
[public-api] Create Personal Access Token implementation
2022-11-22 11:39:52 -03:00
Milan Pavlik
d17e2d67e4
[public-api] Generate & Parse Personal Access Tokens
2022-11-21 09:06:50 -03:00
Milan Pavlik
7f3e1e4c50
[public-api] Proxy Cookies to downstream for auth
2022-11-04 08:49:08 +01:00
Milan Pavlik
a470cdbfc2
[public-api] Refactor to support multiple token types
2022-11-03 13:38:08 +01:00
Milan Pavlik
46d734e482
[public-api] Authentication interceptors for connect API
2022-10-10 16:54:26 +02:00
