Dex Authentication - OpenID Connect Provider

[alfespa17]

Dex Authentication

Removing native Azure Active Directory Authentication, the API now is using Dex a federated OpenID Connect Provider to handle authentication using different connectors, so now Terrakube can be used with different authentication providers supported by Dex.

The following property is used to set the Dex Uri.

org.terrakube.token.issuer-uri=${DexIssuerUri}

Implementing Personal Access Token

• Implementing endpoint to create PAT:

POST {{server}}/pat/v1

{
    "days": 7,
    "description": "Sample Personal Access Token"
}

• Lis created PAT

GET {{server}}/pat/v1
[
    {
        "createdDate": "2022-07-10T17:40:16.193+00:00",
        "createdBy": "XXXX",
        "updatedDate": "2022-07-10T17:40:16.193+00:00",
        "updatedBy": "XXXX",
        "id": "070c3d2d-7fc0-40c3-bf28-ae6f727b79d9",
        "days": 7,
        "description": "Sample Personal Access Token"
    },
    {
        "createdDate": "2022-07-10T17:40:18.155+00:00",
        "createdBy": "XXXX",
        "updatedDate": "2022-07-10T17:40:18.155+00:00",
        "updatedBy": "XXXX",
        "id": "68382f7e-c073-4694-8a14-029b590fab21",
        "days": 7,
        "description": "Sample Personal Access Token"
    }
]

This is implemented using JJWT, all tokens are signed with a secret provided when the application is starting

org.terrakube.token.pat=${PatSecret}

• Terrakube Registry now support PAT inside the /.terraformrc file

{
  "credentials": {
    "terrakube.registry.domain": {
      "token": "PAT"
    }
  }
}

Implement Terrakube Internal Token.

Terrakube now use an internal JWT for component communication, the token is signed by a secret that is loaded in the application startup

org.terrakube.token.internal=${InternalSecret}

Updated Terraform Login Protocol

The terraform login protocol implemented in Terrakube Registry now supports Dex for the authentication

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
15 Code Smells

2.6% Coverage
0.3% Duplication