Commit Graph

13 Commits

Author SHA1 Message Date
Rene Pfeuffer
14f1cb0218 Remove exception from api key verification
This removes repeated exceptions from the api key service when checking requests without an api key. Despite of throwing an exception, the service now simply returns `null`, when the authentication was not successful.

Pushed-by: Rene Pfeuffer<rene.pfeuffer@cloudogu.com>
Co-authored-by: René Pfeuffer<rene.pfeuffer@cloudogu.com>
2023-11-21 08:13:07 +01:00
Eduard Heimbuch
162dd6ad0a CLI Support for repository actions (#1987)
To make SCM-Manager more accessible and to make it easier using scripts against the server, we created a command line interface. This command line interface can be used to perform the default actions like create, modify and delete repositories. It is also very flexible and can be extended by plugins.

The CLI already supports internationalization, help texts, input validation, loose and table-like templates and nested subcommands. Check the cli guidelines to learn how add new cli commands.

Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
2022-04-04 12:02:16 +02:00
Eduard Heimbuch
73c1609d92 Add flag to global config to enable/disable api keys as additional authentication method (#1606)
Add flag to global config to enable/disable API keys as additional authentication method.

Fixes #1599
2021-03-25 12:06:22 +01:00
René Pfeuffer
6002e560ef Heed review remarks 2020-10-26 10:19:59 +01:00
René Pfeuffer
1ca18cd44c Do not create web tokens for api keys
This fixes a way for privilege escalation with api keys.
2020-10-26 10:19:59 +01:00
Sebastian Sdorra
7b91cf82bf Reduce logging of ApiTokenRealm 2020-10-22 14:39:09 +02:00
René Pfeuffer
f35fddc505 Add debug log for successful login 2020-10-14 11:28:21 +02:00
René Pfeuffer
07a85ef9c1 Check token content before handling them
This adds plausibility checks before handling tokens as for example jwt
or api keys. Doing so we generate less error logs and therefore we cause
less confusion.
2020-10-14 11:11:23 +02:00
René Pfeuffer
8733ca97af Clean up class 2020-10-05 10:53:30 +02:00
René Pfeuffer
95bad28b0a Let api key realm check username/password authentication 2020-10-05 10:53:30 +02:00
René Pfeuffer
bd247a4332 Rename role -> permissionRole 2020-10-05 10:53:30 +02:00
René Pfeuffer
4ec75781b7 Add scope from role for api token realm 2020-10-05 10:53:30 +02:00
René Pfeuffer
12ab218eba Add realm for api key 2020-10-05 10:53:30 +02:00