Ishank Arora
26ec5f0a40
Use machine auth when using cs3 backend in proxy service
2021-10-18 09:54:22 +02:00
Ishank Arora
518e8747b2
Add config to skip encoding user groups in reva tokens
2021-10-18 09:54:22 +02:00
Willy Kloucek
6d5a3733ff
upgrade to go micro v4.1.0
2021-10-14 15:56:19 +02:00
Ishank Arora
c0d029dee3
Mint token after roles injection
2021-09-22 15:41:21 +02:00
Ishank Arora
fcd861f38f
Add machine auth API key to ocs service
2021-09-21 17:49:15 +02:00
Ishank Arora
08c51ee8c8
Use reva's Authenticate method instead of spawning token managers
2021-09-21 15:50:19 +02:00
Josh Soref
55667a3ab3
spelling
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
2021-09-20 16:54:29 +05:45
Ishank Arora
10b9fee60e
Specify primary user type for all accounts
2021-08-06 14:16:34 +02:00
Jörn Friedrich Dreyer
1f3e963c29
use claims map instead of struct
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2021-07-22 09:20:36 +00:00
Ishank Arora
29c5cb627a
Update scope usage and add Changes for lightweight accounts
2021-07-13 13:03:06 +02:00
Ishank Arora
6168ee7095
Use CS3 user object fields to store UID and GID
2021-06-16 18:05:40 +02:00
Ishank Arora
7ca9e12116
Public share SQL driver config
2021-04-14 12:48:35 +02:00
Ishank Arora
1b0b14512c
Read UID and GID from the opaque object for CS3 proxy backend
2021-04-13 11:52:22 +02:00
A.Unger
f23cf92153
interpret user from the IDP
2021-04-13 10:48:06 +02:00
A.Unger
ed99fb8292
assign user role if user exists but there are no role assignments
2021-04-09 14:15:47 +02:00
A.Unger
a1d5e34f41
update proxy to use go-micro v3
2021-02-18 08:01:53 +00:00
Ilja Neumann
cd2eb0e39b
Accounts UserBackend tests
2020-12-22 17:27:55 +01:00
Ilja Neumann
0d990898b8
Fix gid was overwritten by roles
2020-12-22 17:27:55 +01:00
Ilja Neumann
1b29e56d12
account_resolver_test.go
2020-12-22 16:16:57 +01:00
Ilja Neumann
92a1bc8fb6
Make it possible to use CS3 as accounts backend instead of account-service
...
Configureable via:
PROXY_ACCOUNT_BACKEND_TYPE=cs3
PROXY_ACCOUNT_BACKEND_TYPE=accounts (default)
By using a backend which implements the CS3 user-api (currently provided by reva/storage) it is possible to bypass
the ocis-accounts service and for example use ldap directly.
Hides user and auth related communication behind a facade (user/backend) to minimize logic-duplication across middlewares.
Allows to switich the account backend from accounts to cs3.
Co-authored-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-12-11 18:34:43 +01:00
