Commit Graph

9 Commits

Author SHA1 Message Date
Nick Ufer 92a9e105cc
feat: makes mutual TLS optional for postgres, mysql/mariadb and grpc (#244)
* feat: makes mutual TLS optional for postgres and mysql

* feat: makes mutual TLS optional for gRPC

* refactor: replaces deprecated grpc.WithInsecure()

* docs: changes meaning of grpc tls option to client cert

* chore: updates test go version to same as project version (1.18)

* test: adds TLS and mutual TLS support to db and grpc test environments

* chore: adds generated test certificates to .gitignore

* chore: reduces test certificates to minimum key usage

* chore: adds second client certificate which acts as unauthorized

* test: adds mysql tls and mutual tls tests

* refactor: postgres ssl config check

* refactor: change connectTries to 0 for postgres to only have 1 retry by default like mysql

* refactor: postgres sslmode and sslrootcert code

* test: adds postgres tls and mutual tls tests

* fix: treat grpc authOpts grpc_ca_cert, grpc_tls_cert, grpc_tls_key as file paths instead of actual file contents

refactor: improves error logging

* test: adds grpc tls and mutual tls tests

* Fix postgres ssl modes `require`, ``verify-ca` and `verify-full` to work without explicit root certificate.

* refactor: adds warning for unknown pg_sslmode

style: removes empty lines

* style: compress switch case

Co-authored-by: Martin Abbrent <martin.abbrent@ufz.de>
2022-10-05 16:32:36 -03:00
Pavel Tolstov 788ee917e4 Add option for sending decrypted claims to JWT Javascript backend 2022-06-11 15:03:37 +03:00
Ignacio Gómez ee6e68db3a
Add JWT files mode. Now both JWT and Files may use the generally available strict files checker.
Files should be able to check ACLs only.
Clen setPrefixes method.
Fix test-backends by building custom plugin too, fix files only acls by checking if a user was seen before creating a general record.
2021-04-27 19:58:54 -04:00
Ignacio Gómez e7c2aec65f
Add tests for files fixes... not yet ready, patterns are failing. 2021-03-05 18:15:53 -03:00
Ignacio Gómez 7a844596a0
Add javascript backend. 2021-02-11 11:02:53 -03:00
Ignacio Gómez fc44c811d2
Refactor JWT backend, add JS mode, allow pre parsing of token for JS and local mode, allow local mode specific DB options instead of sharing with regular DB backends. 2021-02-11 09:48:54 -03:00
Ignacio Gómez b6fd9d3d14
Skip reading acls for not present users, add test cases. 2020-10-29 19:44:34 -03:00
Ignacio Gómez bffb855551 Readwrite fixes for files and redis. Log level added. Benchmarks added. 2018-01-03 15:39:11 -03:00
Ignacio Gómez 5a751afeb6 Fixed files pattern acls and added files tests. 2017-12-08 20:32:32 -03:00