Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(jans-lock-master): deliver token status lsit and 3-rd party data to Cedarling #8744

Closed
Tracked by #8745
yurem opened this issue Jun 19, 2024 · 0 comments · Fixed by #8958
Closed
Tracked by #8745

feat(jans-lock-master): deliver token status lsit and 3-rd party data to Cedarling #8744

yurem opened this issue Jun 19, 2024 · 0 comments · Fixed by #8958
Labels
kind-feature Issue or PR is a new feature request
Milestone

Comments

@yurem
Copy link
Contributor

yurem commented Jun 19, 2024

Cadarling has SSE communication channel with Lock master. This endpoints is protected with access token. At startup Cedarling should open connection to this endpoint for communion and re-open it on connection lost.

The main goal of this endpoint is to supply: token status list data, and 3-rd party data.

Lock master periodically fetch token status list from Jans Auth.
After that it send 2 types of events:

  1. Full token status list
  2. Only changed parts of token status list.
  3. Policy re-load event
  4. 3-rd party data

It's up to Cedarling to process or not these 3 events types.
First event is with full JWT which is needed for new Cedarlings instances or for periodic full resync (Cedarling can do this on low number of policy requests).
Second event type should contains only changed parts of binary token status list.
Third event type Lock should send when it detected policy changes.
Four event is reserved for 3-rd party data.

Required event types:
STATUS_LIST: {full status_list response}
STATUS_LIST_UPDATE: {changed parts in last STATUS_LIST}
CONFIG_UPDATE: {config}
FORCE_REPORT: {force send audit messages imminently}

We need to add details about event types to project wiki.

@mo-auto mo-auto added the kind-feature Issue or PR is a new feature request label Jun 19, 2024
@moabu moabu added this to the 1.1.4 milestone Jul 8, 2024
@yurem yurem mentioned this issue Jul 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind-feature Issue or PR is a new feature request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants