-
Notifications
You must be signed in to change notification settings - Fork 5.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: fetch & cache groups from UserInfo Endpoint #12062
feat: fetch & cache groups from UserInfo Endpoint #12062
Conversation
beabd86
to
6c382e8
Compare
4afd686
to
52d5839
Compare
Codecov ReportAttention:
Additional details and impacted files@@ Coverage Diff @@
## master #12062 +/- ##
==========================================
- Coverage 49.55% 49.53% -0.02%
==========================================
Files 269 269
Lines 47039 47215 +176
==========================================
+ Hits 23310 23389 +79
- Misses 21443 21528 +85
- Partials 2286 2298 +12 ☔ View full report in Codecov by Sentry. |
30c49f7
to
081e72e
Compare
081e72e
to
8d86e43
Compare
8d86e43
to
d9f94d9
Compare
5fa9e65
to
502d932
Compare
502d932
to
13f81ac
Compare
0d72f89
to
69be24c
Compare
96d4fa5
to
c8413ba
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM so far, just some minor things. Please address them, then I'll merge the PR :)
c5cbd3b
to
3497aac
Compare
Signed-off-by: Nathanael Liechti <[email protected]>
3497aac
to
72885b9
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! 🎉
Again, please accept my apologies for the delayed review cycles. Thanks so much for contributing this! ❤️ |
…goproj#12062) Signed-off-by: Nathanael Liechti <[email protected]>
…goproj#12062) Signed-off-by: Nathanael Liechti <[email protected]> Signed-off-by: Filip Rafaj <[email protected]>
…goproj#12062) Signed-off-by: Nathanael Liechti <[email protected]>
…goproj#12062) Signed-off-by: Nathanael Liechti <[email protected]>
…goproj#12062) Signed-off-by: Nathanael Liechti <[email protected]> Signed-off-by: Kevin Lyda <[email protected]>
…goproj#12062) Signed-off-by: Nathanael Liechti <[email protected]>
Second try with a new approach to fix #8272 using a server-side approach. Every time the user does a request with it's OIDC token, argocd-server fetches the user's group information from the UserInfo endpoint (if enabled). The UserInfo response is cached (by default until the OIDC token expires) to avoid unneccesary requests/traffic.
For review some things to point out:
Closes #8272
Checklist: