Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(jans-auth-server): add Token Status List support to AS #8562

Closed
8 tasks
yuriyz opened this issue May 22, 2024 · 0 comments · Fixed by #8620
Closed
8 tasks

feat(jans-auth-server): add Token Status List support to AS #8562

yuriyz opened this issue May 22, 2024 · 0 comments · Fixed by #8620
Assignees
@yuriyz
Labels
comp-jans-auth-server Component affected by issue or PR kind-feature Issue or PR is a new feature request
Milestone
1.1.3

Comments

@yuriyz
Copy link
Contributor

yuriyz commented May 22, 2024

Description

Add Token Status List support to AS

https://datatracker.ietf.org/doc/html/draft-ietf-oauth-status-list-02

Tasks

Test cases and code coverage

  • Write unit test to cover added/changed code
  • Update integration tests to cover added/changed code
  • Documentation
@yuriyz yuriyz added the kind-feature Issue or PR is a new feature request label May 22, 2024
@yuriyz yuriyz self-assigned this May 22, 2024
@mo-auto mo-auto added the comp-jans-auth-server Component affected by issue or PR label May 22, 2024
@moabu moabu added this to the 1.1.3 milestone May 29, 2024
yuriyz added a commit that referenced this issue May 31, 2024
@yuriyz
feat(jans-auth-server): Token Status List support
eb1340f 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
@yuriyz yuriyz mentioned this issue May 31, 2024
Merged
3 tasks
yuriyz added a commit that referenced this issue May 31, 2024
@yuriyz
fix(jans-auth-server): corrected requestContext and azd decoding
d32bca8 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 5, 2024
@yuriyz
feat(jans-auth-server): added token status list endpoint and status c…
d5b3ba9 
…laim with index.

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 6, 2024
@yuriyz
feat(jans-auth-server): added head index to list
b9c5f3d 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 7, 2024
@yuriyz
feat(jans-auth-server): added application/statuslist+json support
e8c6962 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 7, 2024
@yuriyz
fix(jans-auth-server): fixed index during list joins and npe on nextI…
63ab6b6 
…ndex.

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 7, 2024
@yuriyz
feat(jans-auth-server): populate statusListIndex in access and id tokens
47b5f9b 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 10, 2024
@yuriyz
feat(jans-auth-server): added status list update on revoke
3501d12 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 12, 2024
@yuriyz
feat(jans-auth-server): added status list as jwt support
8be4f18 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 13, 2024
@yuriyz
feat(jans-auth-server): use updateWithLock during status update index
53e5c3a 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 13, 2024
@yuriyz
feat(jans-auth-server): update status list on token revoke in separat…
e3cf9d9 
…e thread

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 14, 2024
@yuriyz
feat(jans-auth-server): renamed TokenPool -> StatusTokenPool, TokenPo…
84e6d79 
…olService -> StatusTokenPoolService

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 18, 2024
@yuriyz
feat(jans-auth-server): removed token head index (we are using status…
c066c3b 
… token pools instead)

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 18, 2024
@yuriyz
feat(jans-auth-server): added status list to swagger
39c16ff 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 18, 2024
@yuriyz
feat(jans-auth-server): added ou=node,o=jans to config
3a36b83 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 18, 2024
@yuriyz
feat(jans-auth-server): throw configuration exception if node baseDn …
46d9abc 
…is missed

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 19, 2024
@yuriyz
feat(jans-auth-server): set status_list feature flag enabled by default
f1d4caf 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 19, 2024
@yuriyz
fix(jans-auth-server): fixed node allocation
bd4018c 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 19, 2024
@yuriyz
fix(jans-auth-server): corrected bug in getClusterNodeLast
214a489 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 19, 2024
@yuriyz
feat(jans-auth-server): keep lockKey static and save in jansNode afte…
3e7e322 
…r locking

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 20, 2024
@yuriyz
fix(jans-auth-server): different fixes for cluster node management
c763ed9 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 20, 2024
@yuriyz
fix(jans-auth-server): fixed allocation of status index pools
a58599e 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 21, 2024
@yuriyz
chore(jans-auth-server): added more logs for status index pool alloca…
44fb548 
…tion

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 24, 2024
@yuriyz
feat(jans-auth-server): added status list client
1719b72 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 24, 2024
@yuriyz
fix(jans-auth-server): fixed pool allocation
11b0fbe 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 24, 2024
@yuriyz
chore(jans-auth-server): renamed endpoint /token_status_list -> /stat…
3445a31 
…us_list

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 25, 2024
@yuriyz
chore(jans-auth-server): renamed token_status_list -> status_list
36a453e 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 25, 2024
@yuriyz
chore(jans-auth-server): token statuses VALID - 0, INVALID - 1
17b1431 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 25, 2024
@yuriyz
chore(jans-auth-server): moved status list to model for re-using
d5b2e82 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 26, 2024
@yuriyz
feat(jans-auth-server): added batch index update and fixed concurrent…
0a1842c 
… update issue

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 26, 2024
@yuriyz
feat(jans-auth-server): use new index update method in existing revok…
ccf2306 
…e code

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 27, 2024
@yuriyz
fix(jans-auth-server): fixed status pool index joining
a143dd0 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 27, 2024
@yuriyz
chore(jans-auth-server): code improvements
6ca1e80 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 28, 2024
@yuriyz
test(jans-auth-server): added full integration test for status list
da5f7bb 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 28, 2024
@yuriyz
test(jans-auth-server): added test for CN case
2148d90 
#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
yuriyz added a commit that referenced this issue Jun 28, 2024
@yuriyz
feat(jans-auth-server): mark indexes which we are about to re-use as …
c173c8d 
…VALID

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
moabu added a commit that referenced this issue Jun 28, 2024
@yuriyz @yurem
@pujavs @moabu
feat(jans-auth-server): Token Status List support (#8620)
51101e4 
* chore(jans-auth-server): renamed OXAUTH_UMA_TICKET -> UMA_TICKET

Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): Token Status List support

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): corrected requestContext and azd decoding

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): added token status list endpoint and status claim with index.

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): new cluster beans and services

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth-server): added head index to list

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): move beans to core model

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): add index range to TokenPool

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth-server): added application/statuslist+json support

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): add methods to allocate/release TokenPool

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): fix TokenPool sort

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): implement method to get nextIndex for token

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): implement method to get nextIndex for token

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): instead of using token list status use expiration date

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* fix(jans-auth-server): fixed index during list joins and npe on nextIndex.

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): populate statusListIndex in access and id tokens

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): add ClusterNode services

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): add node base dn

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth-server): added status list update on revoke

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix after merge

Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): add schema for new entries

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): fix allocate

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): fix cluster nodes expiration

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth-server): added status list as jwt support

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): Deprecate TokenPoolStatus

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): implement updateWithLock for concurent lock on revoke

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth-server): use updateWithLock during status update index

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): update status list on token revoke in separate thread

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): renamed TokenPool -> StatusTokenPool, TokenPoolService -> StatusTokenPoolService

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): removed token head index (we are using status token pools instead)

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): added status list to swagger

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): added ou=node,o=jans to config

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): throw configuration exception if node baseDn is missed

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): set status_list feature flag enabled by default

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): fixed node allocation

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): corrected bug in getClusterNodeLast

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): keep lockKey static and save in jansNode after locking

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): different fixes for cluster node management

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): fixed allocation of status index pools

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* chore(jans-auth-server): added more logs for status index pool allocation

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth): igore timezone when DB is PostgresSQL

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth): fetch all node entries if DB is LDAP

Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>

* feat(jans-auth-server): added status list client

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): fixed pool allocation

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* chore(jans-auth-server): renamed endpoint /token_status_list -> /status_list

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-orm): resovle bean property name with AttributeName #8773

* chore(jans-auth-server): renamed token_status_list -> status_list

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* chore(jans-auth-server): token statuses VALID - 0, INVALID - 1

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* chore(jans-auth-server): moved status list to model for re-using

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): added batch index update and fixed concurrent update issue

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): use new index update method in existing revoke code

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* fix(jans-auth-server): fixed status pool index joining

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* chore(jans-auth-server): code improvements

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* test(jans-auth-server): added full integration test for status list

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* test(jans-auth-server): added test for CN case

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* feat(jans-auth-server): mark indexes which we are about to re-use as VALID

#8562
Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* code re-format

Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>

* docs(config-api): regenerating config swagger api

Signed-off-by: pujavs <pujas.works@gmail.com>

---------

Signed-off-by: YuriyZ <yzabrovarniy@gmail.com>
Signed-off-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>
Signed-off-by: pujavs <pujas.works@gmail.com>
Co-authored-by: Yuriy Movchan <Yuriy.Movchan@gmail.com>
Co-authored-by: pujavs <pujas.works@gmail.com>
Co-authored-by: Mohammad Abudayyeh <47318409+moabu@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@yuriyz yuriyz

Labels
comp-jans-auth-server Component affected by issue or PR kind-feature Issue or PR is a new feature request
Projects
None yet
Milestone
1.1.3
Development

Successfully merging a pull request may close this issue.

feat(jans-auth-server): Token Status List support JanssenProject/jans
3 participants
@yuriyz @moabu @mo-auto