53 Commits

Author	SHA1	Message	Date
Ben Irvin	ae90cf5fd0	Merge branch 'api-token-v2/regenerate-tokens-api' into api-token-v2/backend-expirations	2022-08-22 12:11:46 +02:00
Ben Irvin	36d37706ce	add lifespan and expiresAt fields	2022-08-19 16:33:58 +02:00
Ben Irvin	9941198dac	fix regeneration	2022-08-18 14:03:59 +02:00
Ben Irvin	7098ae95be	Merge branch 'api-token-v2/backend/regenerate-token' into api-token-v2/regenerate-tokens-api	2022-08-18 13:48:06 +02:00
Ben Irvin	06d95419f4	add regeneration of tokens	2022-08-18 13:31:02 +02:00
Ben Irvin	21845bb0d0	remove lastUsed from create	2022-08-18 12:30:27 +02:00
Ben Irvin	b2b1432322	Merge branch 'features/api-token-v2' into api-token-v2/permissions-for-api-token	2022-08-18 12:20:45 +02:00
Ben Irvin	9de7791fad	cleanup	2022-08-18 11:53:30 +02:00
Ben Irvin	e28c9e7ec9	add lastUsed	2022-08-18 10:22:09 +02:00
Ben Irvin	0972919247	list and get should return array of action strings	2022-08-12 09:52:47 +02:00
Ben Irvin	8ca7c13449	add some failed attempts at improving	2022-08-11 18:04:59 +02:00
Ben Irvin	df8b8750a7	fix delete	2022-08-11 13:00:21 +02:00
Ben Irvin	5f0a9bdf84	only run one delete query	2022-08-11 11:04:12 +02:00
Ben Irvin	2d9c9a2119	update permissions works	2022-08-11 10:48:40 +02:00
Alexandre Bodin	cf49ddbbfc	Prettier and backend fix	2022-08-11 10:20:49 +02:00
Ben Irvin	fe51a07d01	fix updates	2022-08-10 17:35:15 +02:00
Ben Irvin	4f39f046d9	test update	2022-08-10 10:57:19 +02:00
Ben Irvin	7d59934668	allow empty permissions array on non-custom tokens	2022-08-10 10:55:49 +02:00
Ben Irvin	e7294f812d	only return permissions with custom tokens	2022-08-09 17:48:52 +02:00
Ben Irvin	a5fcc3eaaf	fix failure tests	2022-08-09 10:49:44 +02:00
Ben Irvin	4229f41b4a	use ValidationError	2022-08-09 10:28:42 +02:00
Ben Irvin	895e0c1fe4	return permissions with custom token create	2022-08-09 10:27:34 +02:00
Ben Irvin	01bbebff19	use constants	2022-08-08 22:50:36 +02:00
Ben Irvin	d78ec0243d	use constant	2022-08-08 17:06:38 +02:00
Convly	5c7576db65	Fix update & create	2022-08-05 12:31:16 +02:00
Convly	3a9709bdbf	Attach permission model to tokens, update api token' strategy & services	2022-08-05 12:01:36 +02:00
Pierre Noël	54fda9c7c0	change error messages	2022-04-07 16:50:20 +02:00
Pierre Noël	89221e8ee9	fix wording mistakes	2022-04-07 16:50:19 +02:00
Pierre Noël	79396f8bbb	continue reading API_TOKEN_SALT + add warning deprecated message	2022-04-07 16:50:19 +02:00
Pierre Noël	20e6d9a94b	Improve error messages	2022-04-07 16:50:15 +02:00
Pierre Noël	019007ba3e	improve error message + remove use of API_TOKEN_SALT	2022-04-07 16:34:57 +02:00
Pierre Noël	9fc63af260	harmonize secret generation + don't generate in production mode	2022-04-07 16:34:56 +02:00
tillschweneker	ac0c306a0b	[FIX] respect custom ENV_PATH when setting API_TOKEN_SALT	2021-12-22 10:08:47 +01:00
Alexandre Bodin	9cd59197b1	Fix tests and move api token config to use camelcase naming	2021-10-26 12:18:53 +02:00
Alexandre Bodin	a33d9e56be	Move admin config to config/admin.js	2021-10-26 12:12:02 +02:00
Dieter Stinglhamber	ed83cc353c	implement the ListView for the API Tokens	2021-10-25 09:15:03 +02:00
Dieter Stinglhamber	1a72747672	add api-token auth strategy to the content-api	2021-09-24 12:06:56 +02:00
Dieter Stinglhamber	31d74d2710	allow for partial payload to update a token	2021-09-24 12:05:40 +02:00
Dieter Stinglhamber	f7bd99cb74	implement PUT endpoint to update a token	2021-09-24 12:05:40 +02:00
Dieter Stinglhamber	78e5bd98d3	update tests and rename get method	2021-09-24 12:05:39 +02:00
Dieter Stinglhamber	a4e0df4ce8	implement GET endpoint to get a single token	2021-09-24 12:05:39 +02:00
Dieter Stinglhamber	930156a574	return deleted token	2021-09-24 12:05:38 +02:00
Dieter Stinglhamber	946d3a0ea3	add DELETE route and logic	2021-09-24 12:05:38 +02:00
Dieter Stinglhamber	a804b908c8	adds tests	2021-09-24 12:05:37 +02:00
Dieter Stinglhamber	fd0e206d83	add e2e tests	2021-09-24 12:05:37 +02:00
Dieter Stinglhamber	fd2b0d81ab	implement GET endpoint to list the api tokens	2021-09-24 12:05:37 +02:00
Dieter Stinglhamber	305547b9bb	use createHmac in favour of createHash for added security	2021-09-24 12:05:36 +02:00
Dieter Stinglhamber	ef36034acf	throw an error if there is an issue with the salt configuration	2021-09-24 12:05:36 +02:00
Dieter Stinglhamber	e9b897b66b	store the hashed accessKey in the database	2021-09-24 12:05:35 +02:00
Dieter Stinglhamber	5305f2e757	fix issues after rebasing on release/v4	2021-09-24 12:05:35 +02:00