Project

Profile

Help

Story #8951

Add authentication to content app

Added by gerrod 4 months ago. Updated about 2 months ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
GalaxyNG
Sprint:
Quarter:

Description

A user from AAH wants to be able to log who is downloading from the content app (https://issues.redhat.com/browse/AAH-643), so having authentication will be needed. Requests can be authenticated through middleware (https://docs.aiohttp.org/en/stable/web_advanced.html#middlewares) that will run the same auth methods used by the DRF views. The middleware could be configured by a new setting so users could turn it off. If a request fails authentication they will be marked as an AnonymousUser, but still allowed to download content. The RBAC content guard would use the authentication from this middleware to determine if the user has permission to download or not.


Related issues

Related to Pulp - Story #8940: Add RBAC content guard to pulpcoreCLOSED - CURRENTRELEASE

<a title="Actions" class="icon-only icon-actions js-contextmenu" href="#">Actions</a>

Associated revisions

Revision 3e80f006 View on GitHub
Added by gerrod about 2 months ago

Add authentication to content app

fixes: #8951 https://pulp.plan.io/issues/8951

History

#1 Updated by gerrod 4 months ago

  • Related to Story #8940: Add RBAC content guard to pulpcore added

#2 Updated by pulpbot 4 months ago

  • Status changed from NEW to POST

#4 Updated by gerrod about 2 months ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100

#5 Updated by pulpbot about 2 months ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE

Please register to edit this issue

Also available in: Atom PDF