ngcp-panel

Author SHA1 Message Date

Author	SHA1	Message	Date
Flaviu Mates	db8f0feff6	TT#126601 Implement /api/authtokens endpoint * the endpoint will receive "type" (expires\|onetime) and "expires" (positive integer representing seconds) * type will define the expiray method for the token; onetime: the token expires as soon as it's used, or after "expires" seconds if not used expires: the token can be used multiple times until it expires according to the "expires" param value * login_jwt endpoint for generating the JWT token for subscribers has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * admin_login_jwt endpoint for generating the JWT token for admins has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * login_jwt and amin_login_jwt will respond with 403 "Forbidden" if the token role stored in Redis does not match the role of the user that generated it * /api/authtokens is hidden from documentation for now Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8 (cherry picked from commit `9b422ddabf`)	4 years ago

Flaviu Mates

TT#126601 Implement /api/authtokens endpoint

* the endpoint will receive "type" (expires|onetime)
	    and "expires" (positive integer representing seconds)
	  * type will define the expiray method for the token;
	    onetime: the token expires as soon as it's used, or
	    after "expires" seconds if not used
	    expires: the token can be used multiple times until
	    it expires according to the "expires" param value
	  * login_jwt endpoint for generating the JWT token for
	    subscribers has been enhanced to accept the "token"
	    param, containing the token generated using the
	    /api/authtokens endpoint
	  * admin_login_jwt endpoint for generating the JWT token
	    for admins has been enhanced to accept the "token"
	    param, containing the token generated using the
	    /api/authtokens endpoint
	  * login_jwt and amin_login_jwt will respond with 403
	    "Forbidden" if the token role stored in Redis does
	    not match the role of the user that generated it
	  * /api/authtokens is hidden from documentation for now

Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8
(cherry picked from commit 9b422ddabf)

1 Commits (1870bb7bdf893dba1e52f15227a1a401f67a51a0)