Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for JWT Authorization and token refresh #311

Merged
merged 1 commit into from
Sep 24, 2024
Merged

Conversation

knrc
Copy link
Contributor

@knrc knrc commented Sep 18, 2024

Description

Add support for services secured using JWT Authorization

Linked Issues

How has this been tested?

  • Create initial tokens using helm zoraauth plugin
  • Install into cluster via helm, increasing refreshThreshold parameter to speed up refresh (e.g. 23h45m if token valid for 24h)
  • Monitor secret values, checking token content to ensure it's valid
    Content should be JSON, containing accessToken, refreshToken and token_type. The accessToken can be checked by accessing the /userinfo endpoint for the authorization domain, or viewing in a decoder such as jwt.io.
  • Check invocations against a secure service work as expected

Checklist

  • I have labeled this PR with the relevant Type labels
  • I have documented my code (if applicable)
  • My changes are covered by tests

@knrc knrc added the enhancement New feature or request label Sep 18, 2024
@knrc knrc requested a review from matheusfm September 18, 2024 22:45
@knrc knrc merged commit 9b276fd into undistro:main Sep 24, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants