Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add support for authenticated requests TO rdpc using app to app tokens #98

Closed
3 tasks
rosibaj opened this issue Nov 25, 2020 · 1 comment
Closed
3 tasks
Assignees
Labels
critical This MUST be completed for release Scope Change Scope change from the initial sprint commitment v1.12.0

Comments

@rosibaj
Copy link
Contributor

rosibaj commented Nov 25, 2020

The aggregator connects to the rdpc-api, which now requires AUTH headers to allow for data extraction. We need to add support for authenticated requests to rdpc using app to app tokens. The aggregator needs to:

  • send auth headers to rdpc-api on all calls for authorization

  • be registered as an application in ego

  • be able to generate an app token from ego that is sent in the headers

  • register aggregator as a application in ego; store secrets in vault

  • write some code/use a library to refresh the auth token regularly.

  • hold onto the jwt in memory; use it normally;

  • each time we try and reach out to rdpc-api, do a preflight check on duration of jwt as a self-validation before reaching out to jwt., if it has not expires use it, it it has not

  • issue an application token and use it in the auth headers to the rdpc-gateway-api

@rosibaj rosibaj added the Scope Change Scope change from the initial sprint commitment label Nov 25, 2020
@rosibaj rosibaj added this to the Donkey Kong Sprint 39 milestone Nov 25, 2020
@rosibaj rosibaj added the critical This MUST be completed for release label Dec 3, 2020
@rosibaj rosibaj assigned Buwujiu and unassigned hlminh2000 Dec 3, 2020
@rosibaj
Copy link
Contributor Author

rosibaj commented Jan 14, 2021

@Buwujiu I need a version label on this ticket before we can release it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
critical This MUST be completed for release Scope Change Scope change from the initial sprint commitment v1.12.0
Projects
None yet
Development

No branches or pull requests

3 participants