Project

Profile

Help

Story #8951

closed

Add authentication to content app

Added by gerrod almost 3 years ago. Updated over 2 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
GalaxyNG
Sprint:
Quarter:

Description

A user from AAH wants to be able to log who is downloading from the content app (https://issues.redhat.com/browse/AAH-643), so having authentication will be needed. Requests can be authenticated through middleware (https://docs.aiohttp.org/en/stable/web_advanced.html#middlewares) that will run the same auth methods used by the DRF views. The middleware could be configured by a new setting so users could turn it off. If a request fails authentication they will be marked as an AnonymousUser, but still allowed to download content. The RBAC content guard would use the authentication from this middleware to determine if the user has permission to download or not.


Related issues

Related to Pulp - Story #8940: Add RBAC content guard to pulpcoreCLOSED - CURRENTRELEASEgerrod

Actions
Actions #1

Updated by gerrod almost 3 years ago

  • Related to Story #8940: Add RBAC content guard to pulpcore added
Actions #2

Updated by pulpbot over 2 years ago

  • Status changed from NEW to POST

Added by gerrod over 2 years ago

Revision 3e80f006 | View on GitHub

Add authentication to content app

fixes: #8951 https://pulp.plan.io/issues/8951

Actions #4

Updated by gerrod over 2 years ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100
Actions #5

Updated by pulpbot over 2 years ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE

Also available in: Atom PDF