Story #2358: As a user, I can authenticate with username and password stored in Pulp - Pulp

Send by e-mail

Story #2358

As a user, I can authenticate with username and password stored in Pulp

Added by ttereshc about 4 years ago. Updated 11 months ago.

Status:

CLOSED - CURRENTRELEASE

Priority:

Normal

Assignee:

dkliban@redhat.com

Category:

Sprint/Milestone:

3.0.0

Start date:

Due date:

% Done:

100%

Estimated time:

Platform Release:

Groomed:

Yes

Sprint Candidate:

Yes

Tags:

Sprint:

Sprint 11

Quarter:

Description

Configure Pulp so that:

Basic Auth (with credentials stored in Pulp) works against any protected API endpoint
only authenticated users have access to the API
(use permissions available in DRF out-of-the-box we do not want permissions to be more granular for MVP)

Related issues

Associated revisions

Revision 7ae3e451 View on GitHub
Added by dkliban@redhat.com almost 4 years ago

Adds authentication to the REST API

All API views now require authentication. The password for the 'admin' user can now be set using the 'reset-admin-password' django management command. The new command takes an optional '--random' argument.

closes #2358 https://pulp.plan.io/issues/2358

Revision 7ae3e451 View on GitHub
Added by dkliban@redhat.com almost 4 years ago

Adds authentication to the REST API

closes #2358 https://pulp.plan.io/issues/2358

History

#1 Updated by ttereshc about 4 years ago

Blocked by Task #2243: Create custom django User model added

#2 Updated by ttereshc about 4 years ago

Blocks Story #2359: As a user, I can use JWT tokens for authenticaton added

#3 Updated by ttereshc about 4 years ago

Related to Task #2090: Create a plan for user/auth in 3.0 added

#4 Updated by mhrivnak about 4 years ago

Description updated (diff)

#5 Updated by mhrivnak almost 4 years ago

Description updated (diff)
Groomed changed from No to Yes
Sprint Candidate changed from No to Yes

#6 Updated by mhrivnak almost 4 years ago

Sprint/Milestone set to 29

#7 Updated by dkliban@redhat.com almost 4 years ago

Status changed from NEW to ASSIGNED
Assignee set to dkliban@redhat.com

#8 Updated by dkliban@redhat.com almost 4 years ago

As part of this story, I am also adding a new management command called 'reset-admin-password'. This command will be invoked in the following way:

python manage.py reset-admin-password

Afterwards, the user will be prompted to enter a new password for the 'admin' user of Pulp.

Another way to invoke the command would be with '--random' argument. This would generate a random password for the user 'admin' and then output to stdout.

Our dev setup script could ask the developer to enter a password for 'admin' user. The spec file for the RPM could use this command to create 'admin' user with a random password.