ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Flaviu Mates	9b422ddabf	TT#126601 Implement /api/authtokens endpoint * the endpoint will receive "type" (expires\|onetime) and "expires" (positive integer representing seconds) * type will define the expiray method for the token; onetime: the token expires as soon as it's used, or after "expires" seconds if not used expires: the token can be used multiple times until it expires according to the "expires" param value * login_jwt endpoint for generating the JWT token for subscribers has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * admin_login_jwt endpoint for generating the JWT token for admins has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * login_jwt and amin_login_jwt will respond with 403 "Forbidden" if the token role stored in Redis does not match the role of the user that generated it * /api/authtokens is hidden from documentation for now Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8	4 years ago

Author

SHA1

Message

Date

Flaviu Mates

9b422ddabf

TT#126601 Implement /api/authtokens endpoint

* the endpoint will receive "type" (expires|onetime)
	    and "expires" (positive integer representing seconds)
	  * type will define the expiray method for the token;
	    onetime: the token expires as soon as it's used, or
	    after "expires" seconds if not used
	    expires: the token can be used multiple times until
	    it expires according to the "expires" param value
	  * login_jwt endpoint for generating the JWT token for
	    subscribers has been enhanced to accept the "token"
	    param, containing the token generated using the
	    /api/authtokens endpoint
	  * admin_login_jwt endpoint for generating the JWT token
	    for admins has been enhanced to accept the "token"
	    param, containing the token generated using the
	    /api/authtokens endpoint
	  * login_jwt and amin_login_jwt will respond with 403
	    "Forbidden" if the token role stored in Redis does
	    not match the role of the user that generated it
	  * /api/authtokens is hidden from documentation for now

Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8

1 Commits (6263f167e2c4ab2897af888c20e963db48a2427a)