Commit Graph

1141 Commits

Author SHA1 Message Date
burnettk 50d9a0c3f9 Merge commit '9be0517531543655a35023af17b76dbb41eab93e' 2022-10-17 17:09:47 -04:00
jasquat 47554b0739 updated keycloak to accept demo.spiffworkflow url w/ burnettk 2022-10-17 17:09:42 -04:00
mike cullerton 201a6918a0 pyl changes 2022-10-17 17:03:34 -04:00
mike cullerton a6112f7fb5 Merge branch 'main' into bug/refresh-token 2022-10-17 16:57:33 -04:00
mike cullerton 87f65a6c62 auth_token should be dictionary, not string 2022-10-17 16:56:31 -04:00
mike cullerton f163de61c2 pyl 2022-10-17 12:54:29 -04:00
mike cullerton 1f443bb946 PublicAuthenticationService -> AuthenticationService 2022-10-17 12:43:17 -04:00
mike cullerton 6c491a3df3 Don't refresh token here. They just logged in. We are validating the returned token. If it is bad, raise an error. 2022-10-17 12:38:47 -04:00
mike cullerton 91b8649f86 id_token -> auth_token 2022-10-17 12:37:55 -04:00
mike cullerton fc94774bb5 Move `store_refresh_token` to authentication_service 2022-10-17 12:37:22 -04:00
mike cullerton 00d66e9c51 mypy 2022-10-17 12:02:29 -04:00
mike cullerton c4e415dbee mypy 2022-10-17 11:57:58 -04:00
mike cullerton 1e75716ebd Pre commit 2022-10-17 11:46:39 -04:00
mike cullerton a72b03e092 Rename method. We pass it auth_tokens, not id_tokens 2022-10-17 11:39:22 -04:00
mike cullerton 9a6700a6d5 Too many things expect g.token. Reverting my change 2022-10-17 11:28:09 -04:00
burnettk 34e98b77db Merge commit 'a1a01ad25a1ef60b879dede6f037f0fff3381ae4' 2022-10-17 11:18:12 -04:00
jasquat 248e79441f added environment to sentry configs w/ burnettk 2022-10-17 11:18:03 -04:00
mike cullerton 74883fb231 Noe store refresh_token, and try to use it if auth_token is expired
Renamed some methods to use correct token type
2022-10-17 11:10:47 -04:00
mike cullerton be0557013e Cleanup - remove unused code 2022-10-17 10:54:54 -04:00
mike cullerton cf01f0d514 Add refresh_token model 2022-10-17 10:51:47 -04:00
burnettk c8d0cb8a28 Merge commit 'bee232a55a82054e629f48f0333495b61a7da7d1' 2022-10-17 10:20:35 -04:00
burnettk 2148c39fca no user input, please 2022-10-17 10:18:14 -04:00
burnettk 0047827114 Merge commit '71e189afbc127b574cca8d02fc31b2e65aff0d52' 2022-10-16 22:32:16 -04:00
burnettk 593f33ca52 wait for db to be ready option 2022-10-16 22:31:55 -04:00
burnettk 706094a82f demo env and no ssl for spiff realm on that env 2022-10-15 23:10:38 -04:00
jasquat 657fbad9f7 Merge commit 'f21d0ef3a98458deb347fb2a51fab0b5b41f7fe2' 2022-10-14 16:43:34 -04:00
jasquat 3fff3539fb added configs for demo env w/ burnettk 2022-10-14 16:41:50 -04:00
jasquat 1c0c937af7 added method to delete all permissions so we can recreate them w/ burnettk 2022-10-14 14:10:40 -04:00
Elizabeth Esswein 7e52204f79 fix bs issue 2022-10-14 13:43:45 -04:00
Elizabeth Esswein 8cc59eb337 add strptime to script engine 2022-10-14 13:27:40 -04:00
jasquat aaeaac879a Merge remote-tracking branch 'origin/main' into feature/permissions3 2022-10-14 09:05:45 -04:00
Jon Herron c91c279ec1 Merge commit '93dbce681ec89bc45479748aaae06ddd92b64da4' 2022-10-13 20:45:04 -04:00
jasquat 44856fce25 added api endpoint to check if user has permissions based on given target uris w/ burnettk 2022-10-13 17:16:47 -04:00
github-actions[bot] 59e6ee2c8b
Merge pull request #136 from sartography/dependabot/github_actions/actions/cache-3.0.11
Bump actions/cache from 3.0.10 to 3.0.11
2022-10-13 20:38:45 +00:00
dependabot[bot] 88c61c83bd
Bump actions/cache from 3.0.10 to 3.0.11
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.10 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.10...v3.0.11)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-13 20:30:13 +00:00
jasquat ae830054d7 precommit w/ burnettk 2022-10-13 16:07:01 -04:00
jasquat 94d50efb1f created common method to check whether an api method should have auth w/ burnettk 2022-10-13 16:02:12 -04:00
jasquat c955335d0e precommit w/ burnettk 2022-10-13 15:37:20 -04:00
jasquat 37caf1a69e added a finance user to keycloak and fixed up the staging permission yml w/ burnettk 2022-10-13 15:34:54 -04:00
jasquat 93c4562944 merged in main and resolved conflicts w/ burnettk 2022-10-13 15:02:45 -04:00
jasquat 06a7c6485c remaining tests are now passing w/ burnettk 2022-10-13 14:59:26 -04:00
jasquat 50529d04c3 added test to make sure api gives a 403 if a permission is not found w/ burnettk 2022-10-13 14:46:23 -04:00
jasquat 6a9d0a68a7 api calls are somewhat respecting permissions now and the process api tests are passing 2022-10-13 14:15:31 -04:00
mike cullerton 344f8045b2 Merge branch 'feature/secrets' 2022-10-13 11:07:45 -04:00
mike cullerton 08f112aa5a remove unused import 2022-10-13 11:06:13 -04:00
burnettk 326c88cd62 lint 2022-10-13 09:52:47 -04:00
mike cullerton 516ee5fcd7 Remove allowed process stuff from secrets 2022-10-13 08:20:42 -04:00
mike cullerton 85808cb6b4 Merge branch 'main' into feature/secrets 2022-10-13 07:45:25 -04:00
jasquat d07fbbeff9 attempting to respect permissions w/ burnettk 2022-10-12 17:19:05 -04:00
mike cullerton 6da486fd99 Merge branch 'main' into feature/secrets 2022-10-12 16:57:56 -04:00