ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Flaviu Mates	b4bc1f2a71	TT#133053 Fix 500 error on /api/authtokens * fix typo 'users' to 'user' and 'role' to 'roles' which were causing the Internal Server Error Change-Id: I3cabadafe34d66a429038dcd2c5b0de797cc6ef1	5 years ago
Kirill Solomko	1cdae0b1e0	TT#125902 add Login CSC v2 support * Login CSC v2 button is shown on the subscriber's master data page if www_admin.http_csc.csc_js_enable == 1 or 2 * When the login is triggered an auth token is generated internally followed by a redirect to CSC as /?a=auth_token * move generate_auth_token() into Utils/Auth * improve generate_auth_token() arguments support * add /api/authtokens error handling Change-Id: Idd65400bf8ce6ce48979c736f6a199fb567ffaa4	5 years ago
Flaviu Mates	9b422ddabf	TT#126601 Implement /api/authtokens endpoint * the endpoint will receive "type" (expires\|onetime) and "expires" (positive integer representing seconds) * type will define the expiray method for the token; onetime: the token expires as soon as it's used, or after "expires" seconds if not used expires: the token can be used multiple times until it expires according to the "expires" param value * login_jwt endpoint for generating the JWT token for subscribers has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * admin_login_jwt endpoint for generating the JWT token for admins has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * login_jwt and amin_login_jwt will respond with 403 "Forbidden" if the token role stored in Redis does not match the role of the user that generated it * /api/authtokens is hidden from documentation for now Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8	5 years ago

Author

SHA1

Message

Date

Flaviu Mates

b4bc1f2a71

TT#133053 Fix 500 error on /api/authtokens

* fix typo 'users' to 'user' and
	    'role' to 'roles' which were causing
	    the Internal Server Error

Change-Id: I3cabadafe34d66a429038dcd2c5b0de797cc6ef1

Kirill Solomko

1cdae0b1e0

TT#125902 add Login CSC v2 support

* Login CSC v2 button is shown on the subscriber's master
  data page if www_admin.http_csc.csc_js_enable == 1 or 2
* When the login is triggered an auth token
  is generated internally followed by a redirect to
  CSC as /?a=auth_token
* move generate_auth_token() into Utils/Auth
* improve generate_auth_token() arguments support
* add /api/authtokens error handling

Change-Id: Idd65400bf8ce6ce48979c736f6a199fb567ffaa4

Flaviu Mates

9b422ddabf

TT#126601 Implement /api/authtokens endpoint

* the endpoint will receive "type" (expires|onetime)
	    and "expires" (positive integer representing seconds)
	  * type will define the expiray method for the token;
	    onetime: the token expires as soon as it's used, or
	    after "expires" seconds if not used
	    expires: the token can be used multiple times until
	    it expires according to the "expires" param value
	  * login_jwt endpoint for generating the JWT token for
	    subscribers has been enhanced to accept the "token"
	    param, containing the token generated using the
	    /api/authtokens endpoint
	  * admin_login_jwt endpoint for generating the JWT token
	    for admins has been enhanced to accept the "token"
	    param, containing the token generated using the
	    /api/authtokens endpoint
	  * login_jwt and amin_login_jwt will respond with 403
	    "Forbidden" if the token role stored in Redis does
	    not match the role of the user that generated it
	  * /api/authtokens is hidden from documentation for now

Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8

3 Commits (a25f2cf5f7a619911a2bb2e515f628f0c2e91aee)