Code

VEGA-2105 Add JWT verification #minor#54

Code

Merged

townxelliot merged 19 commits intomainministryofjustice/opg-data-lpa-store:mainfrom VEGA2105_jwtministryofjustice/opg-data-lpa-store:VEGA2105_jwtCopy head branch name to clipboardNov 14, 2023

+417-25

Commits

Commits on Nov 14, 2023

• Install jwt library

  

  Elliot Smith

  committed
  acded5f

• Add testify package

  

  Elliot Smith

  committed
  c48118f

• Add tests for jwt verification

  

  Elliot Smith

  committed
  e301da8

• Implement (most of the) jwt verification

  

  Elliot Smith

  committed
  d2e0eef

• Add test to validate JWT subject based on issuer

  Show description for aae3707
  

  Elliot Smith

  committed
  aae3707

• Implement JWT subject verification based on issuer

  

  Elliot Smith

  committed
  1c4c1a7

• Add tests for constructing a JWTVerifier from env

  

  Elliot Smith

  committed
  0f5a2e0

• Implement JWTVerifier which can be constructed from env

  

  Elliot Smith

  committed
  2401651

• Incorporate verifier into create lambda

  

  Elliot Smith

  committed
  b0bb74c

• Wire up JWT verification to create lambda

  Show description for c497010
  

  Elliot Smith

  committed
  c497010

• Move header parsing out of lambda

  Show description for 748d00a
  

  Elliot Smith

  committed
  748d00a

• Add JWT verification to get and update lambdas

  

  Elliot Smith

  committed
  bea3c7f

• Move header-related code to VerifyHeader()

  

  Elliot Smith

  committed
  9ce63a4

• Add unit tests for VerifyHeader()

  

  Elliot Smith

  committed
  c54b37c

• Tabs, not spaces

  

  Elliot Smith

  committed
  95ed047

• Hard-code test JWT secret

  

  Elliot Smith

  committed
  5b1b279

• Reject requests with a 401 if JWT cannot be verified

  

  Elliot Smith

  committed
  6653e82

• Add API tests for 401 from each lambda

  

  Elliot Smith

  committed
  08b9129

• Show a bit more detail about API tests now there are more

  Show description for 8f80c3b
  

  Elliot Smith

  committed
  8f80c3b