Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

14601 authorization api #16495

Merged
merged 40 commits into from
Dec 5, 2024
Merged

14601 authorization api #16495

merged 40 commits into from
Dec 5, 2024

Conversation

jalbinson
Copy link
Collaborator

@jalbinson jalbinson commented Nov 6, 2024

This PR adds authorization functionality to the auth and submission microservices.

Test Steps:

  1. Get secrets and active access token from Jamie
  2. Start up ReportStream, submissions, and auth (look at document in this PR for steps)
  3. Submit a report to http://localhost:9000/api/v1/reports
  4. Ensure the response you get is NOT 401 or 403. If something goes wrong in submissions thats beyond the scope of this ticket.

Bonus points: run the tests in the auth and submissions project to ensure they are passing on your machine locally.

Changes

  • Okta admin API calls to retrieve group information
  • Added Okta-Groups header with a JWT value
  • JWT read/writing
  • Authorization logic for senders

Checklist

Testing

  • Tested locally?
  • Ran ./prime test or ./gradlew testSmoke against local Docker ReportStream container?
  • Added tests?

Linked Issues

@jalbinson jalbinson changed the title Platform/jamie/14601 authz api 14601 authz api Nov 7, 2024
Copy link
Collaborator

@adegolier adegolier left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Jamie walked me through running the test steps on his end, lgtm

auth/build.gradle.kts Outdated Show resolved Hide resolved
@jalbinson jalbinson merged commit 66c3691 into main Dec 5, 2024
18 checks passed
@jalbinson jalbinson deleted the platform/jamie/14601-authz-api branch December 5, 2024 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
microservice Tickets that are required to properly support the microservice arch platform Platform Team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implement ReportStream AUTH-Z API
5 participants