Commit Graph

9 Commits

Author SHA1 Message Date
Ishank Arora c0d029dee3 Mint token after roles injection 2021-09-22 15:41:21 +02:00
Ishank Arora fcd861f38f Add machine auth API key to ocs service 2021-09-21 17:49:15 +02:00
Ishank Arora 08c51ee8c8 Use reva's Authenticate method instead of spawning token managers 2021-09-21 15:50:19 +02:00
Ishank Arora 10b9fee60e Specify primary user type for all accounts 2021-08-06 14:16:34 +02:00
Jörn Friedrich Dreyer 1f3e963c29 use claims map instead of struct
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-22 09:20:36 +00:00
Ishank Arora 6168ee7095 Use CS3 user object fields to store UID and GID 2021-06-16 18:05:40 +02:00
A.Unger f23cf92153 interpret user from the IDP 2021-04-13 10:48:06 +02:00
Ilja Neumann 0d990898b8 Fix gid was overwritten by roles 2020-12-22 17:27:55 +01:00
Ilja Neumann 92a1bc8fb6 Make it possible to use CS3 as accounts backend instead of account-service
Configureable via:
PROXY_ACCOUNT_BACKEND_TYPE=cs3
PROXY_ACCOUNT_BACKEND_TYPE=accounts (default)

By using a backend which implements the CS3 user-api (currently provided by reva/storage) it is possible to bypass
the ocis-accounts service and for example use ldap directly.

Hides user and auth related communication behind a facade (user/backend) to minimize logic-duplication across middlewares.
Allows to switich the account backend from accounts to cs3.

Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2020-12-11 18:34:43 +01:00