Skip to content

Conversation

@zvonand
Copy link
Collaborator

@zvonand zvonand commented Jul 16, 2025

Introduce authentication using access tokens.

TODO:
  • OIDC processor -- also lookup token expiry timestamp in introspection endpoint
  • OIDC processor --support for custom endpoint for groups lookup
  • better docs
  • better QA

Changelog category (leave one):

  • New Feature

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Introduce access token authentication.

Exclude tests:

  • Fast test
  • Integration Tests
  • Stateless tests
  • Stateful tests
  • Performance tests
  • All with ASAN
  • All with TSAN
  • All with MSAN
  • All with UBSAN
  • All with Coverage
  • All with Aarch64
  • All Regression
  • Disable CI

@github-actions
Copy link

github-actions bot commented Jul 17, 2025

Workflow [PR], commit [2513bc1]

@zvonand zvonand changed the base branch from antalya-25.6 to antalya-25.6.5 August 5, 2025 09:56
@zvonand zvonand force-pushed the oauth-antalya-25.6 branch 2 times, most recently from 57807c8 to 7498a03 Compare August 7, 2025 20:22
@zvonand zvonand force-pushed the oauth-antalya-25.6 branch 4 times, most recently from 17e5a37 to 1c2489d Compare September 4, 2025 10:57
@zvonand zvonand force-pushed the oauth-antalya-25.6 branch 6 times, most recently from 2440350 to 9ad71e6 Compare September 23, 2025 14:14
@Enmk
Copy link
Member

Enmk commented Sep 25, 2025

@zvonand according to the tests it is still broken

@zvonand
Copy link
Collaborator Author

zvonand commented Sep 25, 2025

@Enmk I know, I will fix them or remove them completely

strtgbb and others added 5 commits October 14, 2025 15:46
Add aspell

Enable jwt-cpp in fasttest

Add test + some minor improvements

reduce unneeded possible clash points

fix parsing create user identified with jwt

refactor + fix not lowercase

update test

fix typo in docs

fix logical_error

some refactor

fix alg in jwks

fix jwks

fix user auth method not being checked

update docs

better exception on no sub claim

throw exception if algo not specified in jwk

Support access token authorization of existing users

Also possible to filter users by e-mail using regex

fix token accessstorage

Add Azure token processor, move JWKS logic to separate file

remove docs that will be obsolete in future

remove redundant

resolve tokenCredentials on creation

add basic docs for oauth

add caching, cleanup bs

fix credentials cast + some better code

fix include

fix invalid token handling

add basic openid auth

add keykloak support

major refactor
@zvonand zvonand force-pushed the oauth-antalya-25.6 branch from 9ad71e6 to 2513bc1 Compare October 14, 2025 13:46
@zvonand zvonand changed the title 25.6 Antalya: Token Authentication and Authorization [Deprecated] 25.6 Antalya: Token Authentication and Authorization Oct 14, 2025
@zvonand zvonand closed this Oct 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants