Commit Graph

72 Commits

Author SHA1 Message Date
Michael Klishin e5c84c31fa Pass decoded token so that effective username is computed from it
[#158782152]
[#158782156]
2018-07-06 17:35:34 +03:00
Michael Klishin cb4dfba58a Expect access token in the password field
We cannot pass access tokens in the username since
those are logged and displayed by operator tools.

Per discussion with @acogoluegnes.

[#158782152]
[#158782156]
2018-07-05 19:50:12 +03:00
Michael Klishin 54bf34d9c7 Wording
[#158782152]
[#158782156]
2018-07-03 20:02:48 +03:00
Michael Klishin 435d5c7690 Split the unsuccessful authorization test into 3
[#158782152]
[#158782156]
2018-07-03 20:02:33 +03:00
Michael Klishin c4269275db Convert all suites to use EUnit matchers
[#158782152]
[#158782156]
2018-07-03 17:55:40 +03:00
Michael Klishin 7a758a2ece More test massaging, remove debug logging
[#158782152]
[#158782156]
2018-07-03 16:27:58 +03:00
Michael Klishin 4cc2cfef89 Split and simplify unit tests; naming 2018-07-03 02:15:51 +03:00
Michael Klishin 085c7e6c71 Sync rabbitmq-components.mk, drop Elixir build system bits 2018-07-03 02:15:43 +03:00
Michael Klishin 2466897b3c Add a seed script for development
[#157964874]
2018-07-02 22:01:12 +03:00
Daniil Fedotov 7cf71b01a6 Better errors when validating the decoded token 2018-06-25 15:51:29 +01:00
Daniil Fedotov e69d894462 Fix demo script. Add rabbit_client client to request token. 2018-06-25 15:29:12 +01:00
Daniil Fedotov dbdf2c0e13 Use master branch of uaa_jwt 2018-06-25 10:35:35 +01:00
Daniil Fedotov 032be9763b Use erlang version of uaa_jwt and jose 2018-06-21 17:07:35 +01:00
Michael Klishin d8e8819a06 Cosmetics 2017-09-29 17:27:32 +03:00
Michael Klishin f9d0f202df Ditto 2017-09-29 16:18:00 +03:00
Michael Klishin 43eccbbac9 Use a standard algo name here 2017-09-29 16:17:16 +03:00
Michael Klishin 346caf6c8a Make sure "superuser" information is output last
It is more likely that the user won't read any of the output and
will copy the last token printed.
2017-09-29 15:53:26 +03:00
Michael Klishin 445d35860b Make sure demo/setup.sh doesn't stop on subsequent runs 2017-09-29 15:44:33 +03:00
Michael Klishin a45c1126bd README edits 2017-09-29 14:49:33 +03:00
Michael Klishin 3c2f056306 Use HTTP to talk to the local UAA
It's sufficient for the purposes of this demo script.
2017-09-28 15:16:28 +03:00
Michael Klishin 298cc94c0d Make demo/setup.sh executable 2017-09-28 14:58:12 +03:00
Daniil Fedotov cdb142e68a UAA configuration demo 2017-09-21 09:42:40 +01:00
Daniil Fedotov 3ee9e3f218 Correct pem_file key type 2017-09-20 16:44:01 +01:00
Daniil Fedotov 973ef5ccef Add support for pem public key 2017-09-20 16:40:56 +01:00
Michael Klishin e645ac65e3 Update rabbitmq-components.mk 2017-09-15 12:13:50 -06:00
Daniil Fedotov b56089f24b Update readme to mention RabbitMQ version requirement. 2017-09-15 17:44:50 +01:00
Daniil Fedotov b21d8c63c6 Update erlang.mk 2017-08-30 19:35:00 +01:00
Michael Klishin df624ffcfa Update README.md 2017-07-17 20:19:31 +03:00
Michael Klishin 10ffe94340 Merge branch 'stable' 2017-06-29 23:34:11 +03:00
Michael Klishin 2dac3f3a5b Sync rabbitmq-components.mk with common 2017-06-29 23:29:23 +03:00
Jean-Sébastien Pédron a3be807c50 Makefile: Use GNU Make functions to set `$(MIX_ERL_LIBS)`
This gives a consistent result, as opposed to the shell-based variant
which produces a value which depends on the existing dependencies.

This change plus the new Makefile in `uaa_jwt` make sure that `uaa_jwt`
is found by Erlang, in particular in the testsuite.
2017-02-21 18:02:06 +01:00
Daniil Fedotov 560dde1bb2 Scope examples in README 2017-02-17 11:34:57 +00:00
Daniil Fedotov 5fdfda0846 Improve tests 2017-02-17 11:33:08 +00:00
kjnilsson b0eaa66f9d README clarifications 2017-02-17 10:05:54 +00:00
kjnilsson b90da412e9 Add cowlib to DEPS 2017-02-17 09:33:30 +00:00
Daniil Fedotov 540f3452c9 Handle json parsing error 2017-02-16 15:58:39 +00:00
Daniil Fedotov 7b421e6ae1 Return error instead of error_message to comply with authz_backend API 2017-02-08 16:32:59 +00:00
Daniil Fedotov c71c3eb292 Test token expiration 2017-02-03 13:01:24 +00:00
Daniil Fedotov 612c9eeacf Do not decode token every time permission is checked.
Decoded token is saved to `impl`.
When permission is checked, the `exp` field of the token
is compared to system_time and if the token is expired
`{error_message, "Token expired"}` is returned.
2017-02-02 18:31:01 +00:00
Daniil Fedotov 24551ef095 Test default key support 2017-02-02 13:09:53 +00:00
Daniil Fedotov a07b4485e6 Test key validation when adding via cli command 2017-02-02 12:25:38 +00:00
Daniil Fedotov 78bb2044fb Test command validation 2017-02-02 11:29:25 +00:00
Daniil Fedotov df197ad5b9 Command to add UAA signing keys 2017-02-01 17:15:10 +00:00
Jean-Sébastien Pédron e7222ed218 Makefile: amqp_client is not needed, remove it from DEPS 2017-01-31 17:15:35 +01:00
Jean-Sébastien Pédron 2758f3f01a Remove build.config; we use a vanilla erlang.mk 2017-01-31 17:15:01 +01:00
Jean-Sébastien Pédron b7a4e4daec Makefile: Add rabbit_common to BUILD_DEPS
It's required for the Erlang.mk plugins.
2017-01-31 12:23:33 +01:00
Jean-Sébastien Pédron 16c3866d7a Makefile: Do not depend twice on `rabbit`
[#136341089]
2017-01-31 11:21:59 +01:00
Daniil Fedotov afb59ddc20 Fix test to represent Jwt decoded extended scope permissions 2017-01-27 11:48:35 +00:00
Daniil Fedotov 759d66263b Decode and verify UAA JWT tokens without connecting to UAA server
Fixes #3
Uses rabbitmq/uaa_jwt library to decode a token and verify signature.
Signing keys should be predefined in the uaa_jwt application environment
2017-01-27 11:32:14 +00:00
Michael Klishin d696050da3 Wording, grammar 2017-01-27 01:57:30 +03:00