Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Implement access token validator #35

Merged
merged 2 commits into from
Sep 11, 2023
Merged

Implement access token validator #35

merged 2 commits into from
Sep 11, 2023

Conversation

QubitPi
Copy link
Owner

@QubitPi QubitPi commented Sep 6, 2023 •
edited
Loading

Changelog

Added

  • A ContainerRequestFilter called OAuthFilter was implemented to validate OAuth 2 access_token with the following behavior

    • All incoming request must contain a "Authorization: "Bearer <access_token>" header, otherwise it will be aborted with 401
    • Currently, the filter uses an "all-pass" token validator

Changed

  • All IT tests fire request with pre-configured auth header that contains a valid JWT token

Deprecated

Removed

Fixed

Security

Checklist

  • Test
  • Self-review
  • Documentation

Reference

@QubitPi QubitPi self-assigned this Sep 6, 2023
@QubitPi QubitPi force-pushed the implement-access-token-validator branch from 27e4359 to 3ec689a Compare September 11, 2023 00:30
@QubitPi QubitPi force-pushed the implement-access-token-validator branch from 3ec689a to 9f90665 Compare September 11, 2023 00:31
@QubitPi QubitPi force-pushed the implement-access-token-validator branch from dbca256 to b2bd5a3 Compare September 11, 2023 00:59
@sonarcloud
Copy link

sonarcloud bot commented Sep 11, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 1 Code Smell

100.0% 100.0% Coverage
0.0% 0.0% Duplication

@QubitPi QubitPi merged commit be6223f into master Sep 11, 2023
9 checks passed
@QubitPi QubitPi deleted the implement-access-token-validator branch September 11, 2023 01:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@QubitPi QubitPi

Labels
MERGEABLE SECURITY
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@QubitPi