Commit Graph

463 Commits

Author SHA1 Message Date
Daniil Fedotov 7cf71b01a6 Better errors when validating the decoded token 2018-06-25 15:51:29 +01:00
Daniil Fedotov e69d894462 Fix demo script. Add rabbit_client client to request token. 2018-06-25 15:29:12 +01:00
Daniil Fedotov dbdf2c0e13 Use master branch of uaa_jwt 2018-06-25 10:35:35 +01:00
Daniil Fedotov 032be9763b Use erlang version of uaa_jwt and jose 2018-06-21 17:07:35 +01:00
Michael Klishin d8e8819a06 Cosmetics 2017-09-29 17:27:32 +03:00
Michael Klishin f9d0f202df Ditto 2017-09-29 16:18:00 +03:00
Michael Klishin 43eccbbac9 Use a standard algo name here 2017-09-29 16:17:16 +03:00
Michael Klishin 346caf6c8a Make sure "superuser" information is output last
It is more likely that the user won't read any of the output and
will copy the last token printed.
2017-09-29 15:53:26 +03:00
Michael Klishin 445d35860b Make sure demo/setup.sh doesn't stop on subsequent runs 2017-09-29 15:44:33 +03:00
Michael Klishin a45c1126bd README edits 2017-09-29 14:49:33 +03:00
Michael Klishin 3c2f056306 Use HTTP to talk to the local UAA
It's sufficient for the purposes of this demo script.
2017-09-28 15:16:28 +03:00
Michael Klishin 298cc94c0d Make demo/setup.sh executable 2017-09-28 14:58:12 +03:00
Daniil Fedotov cdb142e68a UAA configuration demo 2017-09-21 09:42:40 +01:00
Daniil Fedotov 3ee9e3f218 Correct pem_file key type 2017-09-20 16:44:01 +01:00
Daniil Fedotov 973ef5ccef Add support for pem public key 2017-09-20 16:40:56 +01:00
Michael Klishin e645ac65e3 Update rabbitmq-components.mk 2017-09-15 12:13:50 -06:00
Daniil Fedotov b56089f24b Update readme to mention RabbitMQ version requirement. 2017-09-15 17:44:50 +01:00
Daniil Fedotov b21d8c63c6 Update erlang.mk 2017-08-30 19:35:00 +01:00
Michael Klishin df624ffcfa Update README.md 2017-07-17 20:19:31 +03:00
Michael Klishin 10ffe94340 Merge branch 'stable' 2017-06-29 23:34:11 +03:00
Michael Klishin 2dac3f3a5b Sync rabbitmq-components.mk with common 2017-06-29 23:29:23 +03:00
Jean-Sébastien Pédron a3be807c50 Makefile: Use GNU Make functions to set `$(MIX_ERL_LIBS)`
This gives a consistent result, as opposed to the shell-based variant
which produces a value which depends on the existing dependencies.

This change plus the new Makefile in `uaa_jwt` make sure that `uaa_jwt`
is found by Erlang, in particular in the testsuite.
2017-02-21 18:02:06 +01:00
Daniil Fedotov 560dde1bb2 Scope examples in README 2017-02-17 11:34:57 +00:00
Daniil Fedotov 5fdfda0846 Improve tests 2017-02-17 11:33:08 +00:00
kjnilsson b0eaa66f9d README clarifications 2017-02-17 10:05:54 +00:00
kjnilsson b90da412e9 Add cowlib to DEPS 2017-02-17 09:33:30 +00:00
Daniil Fedotov 540f3452c9 Handle json parsing error 2017-02-16 15:58:39 +00:00
Daniil Fedotov 7b421e6ae1 Return error instead of error_message to comply with authz_backend API 2017-02-08 16:32:59 +00:00
Daniil Fedotov c71c3eb292 Test token expiration 2017-02-03 13:01:24 +00:00
Daniil Fedotov 612c9eeacf Do not decode token every time permission is checked.
Decoded token is saved to `impl`.
When permission is checked, the `exp` field of the token
is compared to system_time and if the token is expired
`{error_message, "Token expired"}` is returned.
2017-02-02 18:31:01 +00:00
Daniil Fedotov 24551ef095 Test default key support 2017-02-02 13:09:53 +00:00
Daniil Fedotov a07b4485e6 Test key validation when adding via cli command 2017-02-02 12:25:38 +00:00
Daniil Fedotov 78bb2044fb Test command validation 2017-02-02 11:29:25 +00:00
Daniil Fedotov df197ad5b9 Command to add UAA signing keys 2017-02-01 17:15:10 +00:00
Jean-Sébastien Pédron e7222ed218 Makefile: amqp_client is not needed, remove it from DEPS 2017-01-31 17:15:35 +01:00
Jean-Sébastien Pédron 2758f3f01a Remove build.config; we use a vanilla erlang.mk 2017-01-31 17:15:01 +01:00
Jean-Sébastien Pédron b7a4e4daec Makefile: Add rabbit_common to BUILD_DEPS
It's required for the Erlang.mk plugins.
2017-01-31 12:23:33 +01:00
Jean-Sébastien Pédron 16c3866d7a Makefile: Do not depend twice on `rabbit`
[#136341089]
2017-01-31 11:21:59 +01:00
Daniil Fedotov afb59ddc20 Fix test to represent Jwt decoded extended scope permissions 2017-01-27 11:48:35 +00:00
Daniil Fedotov 759d66263b Decode and verify UAA JWT tokens without connecting to UAA server
Fixes #3
Uses rabbitmq/uaa_jwt library to decode a token and verify signature.
Signing keys should be predefined in the uaa_jwt application environment
2017-01-27 11:32:14 +00:00
Michael Klishin d696050da3 Wording, grammar 2017-01-27 01:57:30 +03:00
Michael Klishin 42e401e900 invalid_resource_authorization => resource_server_authentication_failed
HTTP 401 response can indicate an authorization failure as well
but let's assume authentication failures will be more common in this
specific case.
2017-01-27 01:51:48 +03:00
Michael Klishin 88ac9518e2 Wording 2017-01-27 01:47:05 +03:00
Michael Klishin 0e595fe48f Wording 2017-01-27 01:39:25 +03:00
Michael Klishin 269a2729e0 This example doesn't actually seem to be case insensitive 2017-01-27 01:34:53 +03:00
Michael Klishin ff88614186 Wording 2017-01-27 01:34:47 +03:00
Daniil Fedotov a53e4d3cb9 Support topic authorization 2017-01-24 17:26:59 +00:00
Daniil Fedotov 11cf835d80 Readme for new scopes format 2016-12-20 14:55:53 +00:00
Daniil Fedotov dfc61ec18f Change scope to permission mapping 2016-12-20 13:13:18 +00:00
Daniil Fedotov a08e081b03 Use erlang 18.3 only in travis 2016-05-17 09:55:50 +01:00
Daniil Fedotov ff84dfae52 Support for custom resource kinds 2016-02-16 12:36:38 +00:00
Daniil Fedotov b5c47a75f6 Resource ID filtering 2016-02-16 12:22:49 +00:00
Michael Klishin 1aafd86229 Update README.md 2016-01-21 14:30:15 +03:00
Michael Klishin ae77becec7 Update README.md 2016-01-21 14:29:02 +03:00
Daniil Fedotov 4835e0b3af Indent 2016-01-20 14:24:06 +00:00
Daniil Fedotov e1a404b005 Workflow info 2016-01-20 14:16:24 +00:00
Daniil Fedotov 99279bd10f Tests 2016-01-20 14:04:14 +00:00
Daniil Fedotov db72e7d9e3 Tesing on working UAA 2016-01-18 18:05:45 +00:00
Daniil Fedotov 0109fab275 Resource id. Scopes README 2016-01-15 17:03:31 +00:00
Daniil Fedotov d6888dafb0 wrong arity 2016-01-15 16:51:16 +00:00
Daniil Fedotov f0a5693939 rabbitmq_oauth2_scope from oauth backend 2016-01-15 16:50:25 +00:00
Daniil Fedotov ab2d141885 Update README.md 2016-01-15 15:00:16 +00:00
Daniil Fedotov 47da90b652 Init. Make request to /check_token 2016-01-15 14:50:21 +00:00