ngcp-panel

Author SHA1 Message Date

Author	SHA1	Message	Date
Kirill Solomko	871fbe41e2	TT#129162 tighten user access checks * add additional centralised checks for inactive and read_only users. * use_userdata_from_session=0 now for all auth realms to cause the data re-fetched from the database, to avoid scenarios when a user is set as inactive or read_only and UI keeps using the cached data. the change only affects cookie and JWT subscriber based sessions as in all other cases, the auth data is fetched from the storage regardless. * add is_active=1 flag for the internal 'system' role, as otherwise access would be permanently denied for it. * default 403 error for denied api requests is changed to "Forbidden" instead of "Forbidden path". Change-Id: I1d6d3c765ca8e017e11845c1f5260243a3963c3b (cherry picked from commit `20e77c7b54`)	4 years ago
Kirill Solomko	aa279e025a	TT#76111 add admin flags for 'system' user * 'system' user must have admin flags properly set Change-Id: I7b38aa590ec4e049186f87d17334a61bb865d233	5 years ago
Gerhard Jungwirth	ba3548d825	TT#16003 implement JWT auth - read key from specific config file - key is hex encoded + fix: add libcryptx-perl as dependency (actually dep of libcrypt-jwt-perl) + fix: typo in perl (comma instead of assignment) + fix: chomp any preceeding newlines from jwt_secret Change-Id: I6c6bd4dc0d7fa7fa43868afb13b4d8d838d90564	8 years ago

Kirill Solomko

TT#129162 tighten user access checks

* add additional centralised checks for inactive and read_only users.
* use_userdata_from_session=0 now for all auth realms to cause the data
  re-fetched from the database, to avoid scenarios when a user is set
  as inactive or read_only and UI keeps using the cached data.
  the change only affects cookie and JWT subscriber based sessions
  as in all other cases, the auth data is fetched from the storage regardless.
* add is_active=1 flag for the internal 'system' role, as otherwise
  access would be permanently denied for it.
* default 403 error for denied api requests is changed to "Forbidden"
  instead of "Forbidden path".

Change-Id: I1d6d3c765ca8e017e11845c1f5260243a3963c3b
(cherry picked from commit 20e77c7b54)

Kirill Solomko

aa279e025a

TT#76111 add admin flags for 'system' user

* 'system' user must have admin flags properly set

Change-Id: I7b38aa590ec4e049186f87d17334a61bb865d233

Gerhard Jungwirth

ba3548d825

TT#16003 implement JWT auth

- read key from specific config file
- key is hex encoded
+ fix: add libcryptx-perl as dependency (actually dep of libcrypt-jwt-perl)
+ fix: typo in perl (comma instead of assignment)
+ fix: chomp any preceeding newlines from jwt_secret

Change-Id: I6c6bd4dc0d7fa7fa43868afb13b4d8d838d90564

3 Commits (1870bb7bdf893dba1e52f15227a1a401f67a51a0)