Skip to content

GitLab

C
che-jwtproxy

THIS IS ONLY A TEST INSTANCE. DON'T DO IMPORTANT WORK HERE!

Switch branch/tag
  1. 26 Feb, 2020 1 commit
  3. 25 Feb, 2020 1 commit
  5. 24 Feb, 2020 1 commit
  7. 15 Jan, 2020 1 commit
  9. 20 Nov, 2019 1 commit
  11. 05 Sep, 2019 3 commits
  13. 04 Sep, 2019 1 commit
    • Lukas Krejci's avatar
      Support single-host mode of Che server. (#11) · 71013a45
      Lukas Krejci authored 
      Support single-host mode of Che server.

* A custom URI prefix for the auth redirect can be configured, called 
public_base_path. This is so that we can construct valid externally 
reachable URLs even behind a path-rewriting  ingress
* Change the order in which the auth token is located. First we try to
find it in the query params, then in the Authorization header as a bearer
token and only then in the cookie. This enables us to "refresh" the token
from the client side easily.
* On any error to validate the token (apart from the inability to parse the
token in the first place) we know send the auth redirect instead of an
error. This should help the client side refresh the token on timeouts, etc.
* Do not set the cookie in the response if cookies are not enabled in the
config.
* Respond with 403 - Forbidden if cookies are not enabled. In this case
the client needs to directly authenticate with the backend server.
Signed-off-by: default avatarLukas Krejci <lkrejci@redhat.com>
      71013a45
  15. 05 Jul, 2019 1 commit
  17. 25 Oct, 2018 1 commit
  19. 24 Oct, 2018 2 commits
  21. 18 Oct, 2018 1 commit
  23. 16 Aug, 2018 1 commit
  25. 15 Aug, 2018 12 commits
  27. 14 Aug, 2018 1 commit
  29. 10 Aug, 2018 1 commit
  31. 08 Aug, 2018 6 commits
  33. 19 Jul, 2018 5 commits

Copyright © Eclipse Foundation, Inc. All Rights Reserved.