Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AGENT-950: Implement Separate JWT Tokens for Different User Personas #9039

Merged
merged 12 commits into from
Nov 15, 2024
Merged

AGENT-950: Implement Separate JWT Tokens for Different User Personas #9039

merged 12 commits into from
Nov 15, 2024

Commits on Nov 13, 2024

  1. AGENT-950: Implement Separate JWT Tokens for Different User Personas 

    - Create 3 seperate JWT tokens- AGENT_AUTH_TOKEN, USER_AUTH_TOKEN, WATCHER_AUTH_TOKEN
- Update the claim to set 'auth_scheme' to identify the user persona
-  Assisted service checks the `auth_scheme` to determine which user persona is allowed to access an endpoint
- WATCHER_AUTH_TOKEN is used with header `Watcher-Authorization` and is used by wait-for command ( watcher persona)
- USER_AUTH_TOKEN is used with header `Authorization` and is used by curl API requests, systemd services ( user persona)
- AGENT_AUTH_TOKEN is used with header `X-Secret-Key` and is used by agent service ( agent persona)
    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    a189a7d View commit details
    Browse the repository at this point in the history

  2. fix linting errors, unit tests, shellchecks

    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    fe60214 View commit details
    Browse the repository at this point in the history

  3. update keyname

    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    58f798c View commit details
    Browse the repository at this point in the history

  4. Add comments

    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    dd4713b View commit details
    Browse the repository at this point in the history

  5. Make PATCH request in sync with other requests ( used in appliance repo)

    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    7a3528b View commit details
    Browse the repository at this point in the history

  6. Day2 monitor use case. Save watcherAuthToken in the secret

    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    60d37d0 View commit details
    Browse the repository at this point in the history

  7. Rename var to a common name AUTH_TOKEN_EXPIRY. All the 3 tokens expir… 

    …e at the same time.
    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    e2e19d2 View commit details
    Browse the repository at this point in the history

  8. code refactoring

    @pawanpinjarkar
    pawanpinjarkar committed Nov 13, 2024
    Configuration menu
    Copy the full SHA
    e45f4d6 View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2024

  1. code optimization

    @pawanpinjarkar
    pawanpinjarkar committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    b346e46 View commit details
    Browse the repository at this point in the history

  2. Enable agent-installer-local auth type

    @pawanpinjarkar
    pawanpinjarkar committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    f7aa520 View commit details
    Browse the repository at this point in the history

  3. refactor

    @pawanpinjarkar
    pawanpinjarkar committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    fcbc5af View commit details
    Browse the repository at this point in the history

  4. typo

    @pawanpinjarkar
    pawanpinjarkar committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    4185056 View commit details
    Browse the repository at this point in the history