Daniil Fedotov
7cf71b01a6
Better errors when validating the decoded token
2018-06-25 15:51:29 +01:00
Daniil Fedotov
e69d894462
Fix demo script. Add rabbit_client client to request token.
2018-06-25 15:29:12 +01:00
Daniil Fedotov
dbdf2c0e13
Use master branch of uaa_jwt
2018-06-25 10:35:35 +01:00
Daniil Fedotov
032be9763b
Use erlang version of uaa_jwt and jose
2018-06-21 17:07:35 +01:00
Michael Klishin
d8e8819a06
Cosmetics
2017-09-29 17:27:32 +03:00
Michael Klishin
f9d0f202df
Ditto
2017-09-29 16:18:00 +03:00
Michael Klishin
43eccbbac9
Use a standard algo name here
2017-09-29 16:17:16 +03:00
Michael Klishin
346caf6c8a
Make sure "superuser" information is output last
...
It is more likely that the user won't read any of the output and
will copy the last token printed.
2017-09-29 15:53:26 +03:00
Michael Klishin
445d35860b
Make sure demo/setup.sh doesn't stop on subsequent runs
2017-09-29 15:44:33 +03:00
Michael Klishin
a45c1126bd
README edits
2017-09-29 14:49:33 +03:00
Michael Klishin
3c2f056306
Use HTTP to talk to the local UAA
...
It's sufficient for the purposes of this demo script.
2017-09-28 15:16:28 +03:00
Michael Klishin
298cc94c0d
Make demo/setup.sh executable
2017-09-28 14:58:12 +03:00
Daniil Fedotov
cdb142e68a
UAA configuration demo
2017-09-21 09:42:40 +01:00
Daniil Fedotov
3ee9e3f218
Correct pem_file key type
2017-09-20 16:44:01 +01:00
Daniil Fedotov
973ef5ccef
Add support for pem public key
2017-09-20 16:40:56 +01:00
Michael Klishin
e645ac65e3
Update rabbitmq-components.mk
2017-09-15 12:13:50 -06:00
Daniil Fedotov
b56089f24b
Update readme to mention RabbitMQ version requirement.
2017-09-15 17:44:50 +01:00
Daniil Fedotov
b21d8c63c6
Update erlang.mk
2017-08-30 19:35:00 +01:00
Michael Klishin
df624ffcfa
Update README.md
2017-07-17 20:19:31 +03:00
Michael Klishin
10ffe94340
Merge branch 'stable'
2017-06-29 23:34:11 +03:00
Michael Klishin
2dac3f3a5b
Sync rabbitmq-components.mk with common
2017-06-29 23:29:23 +03:00
Jean-Sébastien Pédron
a3be807c50
Makefile: Use GNU Make functions to set `$(MIX_ERL_LIBS)`
...
This gives a consistent result, as opposed to the shell-based variant
which produces a value which depends on the existing dependencies.
This change plus the new Makefile in `uaa_jwt` make sure that `uaa_jwt`
is found by Erlang, in particular in the testsuite.
2017-02-21 18:02:06 +01:00
Daniil Fedotov
560dde1bb2
Scope examples in README
2017-02-17 11:34:57 +00:00
Daniil Fedotov
5fdfda0846
Improve tests
2017-02-17 11:33:08 +00:00
kjnilsson
b0eaa66f9d
README clarifications
2017-02-17 10:05:54 +00:00
kjnilsson
b90da412e9
Add cowlib to DEPS
2017-02-17 09:33:30 +00:00
Daniil Fedotov
540f3452c9
Handle json parsing error
2017-02-16 15:58:39 +00:00
Daniil Fedotov
7b421e6ae1
Return error instead of error_message to comply with authz_backend API
2017-02-08 16:32:59 +00:00
Daniil Fedotov
c71c3eb292
Test token expiration
2017-02-03 13:01:24 +00:00
Daniil Fedotov
612c9eeacf
Do not decode token every time permission is checked.
...
Decoded token is saved to `impl`.
When permission is checked, the `exp` field of the token
is compared to system_time and if the token is expired
`{error_message, "Token expired"}` is returned.
2017-02-02 18:31:01 +00:00
Daniil Fedotov
24551ef095
Test default key support
2017-02-02 13:09:53 +00:00
Daniil Fedotov
a07b4485e6
Test key validation when adding via cli command
2017-02-02 12:25:38 +00:00
Daniil Fedotov
78bb2044fb
Test command validation
2017-02-02 11:29:25 +00:00
Daniil Fedotov
df197ad5b9
Command to add UAA signing keys
2017-02-01 17:15:10 +00:00
Jean-Sébastien Pédron
e7222ed218
Makefile: amqp_client is not needed, remove it from DEPS
2017-01-31 17:15:35 +01:00
Jean-Sébastien Pédron
2758f3f01a
Remove build.config; we use a vanilla erlang.mk
2017-01-31 17:15:01 +01:00
Jean-Sébastien Pédron
b7a4e4daec
Makefile: Add rabbit_common to BUILD_DEPS
...
It's required for the Erlang.mk plugins.
2017-01-31 12:23:33 +01:00
Jean-Sébastien Pédron
16c3866d7a
Makefile: Do not depend twice on `rabbit`
...
[#136341089 ]
2017-01-31 11:21:59 +01:00
Daniil Fedotov
afb59ddc20
Fix test to represent Jwt decoded extended scope permissions
2017-01-27 11:48:35 +00:00
Daniil Fedotov
759d66263b
Decode and verify UAA JWT tokens without connecting to UAA server
...
Fixes #3
Uses rabbitmq/uaa_jwt library to decode a token and verify signature.
Signing keys should be predefined in the uaa_jwt application environment
2017-01-27 11:32:14 +00:00
Michael Klishin
d696050da3
Wording, grammar
2017-01-27 01:57:30 +03:00
Michael Klishin
42e401e900
invalid_resource_authorization => resource_server_authentication_failed
...
HTTP 401 response can indicate an authorization failure as well
but let's assume authentication failures will be more common in this
specific case.
2017-01-27 01:51:48 +03:00
Michael Klishin
88ac9518e2
Wording
2017-01-27 01:47:05 +03:00
Michael Klishin
0e595fe48f
Wording
2017-01-27 01:39:25 +03:00
Michael Klishin
269a2729e0
This example doesn't actually seem to be case insensitive
2017-01-27 01:34:53 +03:00
Michael Klishin
ff88614186
Wording
2017-01-27 01:34:47 +03:00
Daniil Fedotov
a53e4d3cb9
Support topic authorization
2017-01-24 17:26:59 +00:00
Daniil Fedotov
11cf835d80
Readme for new scopes format
2016-12-20 14:55:53 +00:00
Daniil Fedotov
dfc61ec18f
Change scope to permission mapping
2016-12-20 13:13:18 +00:00
Daniil Fedotov
a08e081b03
Use erlang 18.3 only in travis
2016-05-17 09:55:50 +01:00
Daniil Fedotov
ff84dfae52
Support for custom resource kinds
2016-02-16 12:36:38 +00:00
Daniil Fedotov
b5c47a75f6
Resource ID filtering
2016-02-16 12:22:49 +00:00
Michael Klishin
1aafd86229
Update README.md
2016-01-21 14:30:15 +03:00
Michael Klishin
ae77becec7
Update README.md
2016-01-21 14:29:02 +03:00
Daniil Fedotov
4835e0b3af
Indent
2016-01-20 14:24:06 +00:00
Daniil Fedotov
e1a404b005
Workflow info
2016-01-20 14:16:24 +00:00
Daniil Fedotov
99279bd10f
Tests
2016-01-20 14:04:14 +00:00
Daniil Fedotov
db72e7d9e3
Tesing on working UAA
2016-01-18 18:05:45 +00:00
Daniil Fedotov
0109fab275
Resource id. Scopes README
2016-01-15 17:03:31 +00:00
Daniil Fedotov
d6888dafb0
wrong arity
2016-01-15 16:51:16 +00:00
Daniil Fedotov
f0a5693939
rabbitmq_oauth2_scope from oauth backend
2016-01-15 16:50:25 +00:00
Daniil Fedotov
ab2d141885
Update README.md
2016-01-15 15:00:16 +00:00
Daniil Fedotov
47da90b652
Init. Make request to /check_token
2016-01-15 14:50:21 +00:00