Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed broken oauth2 login for operator #1217

Merged
merged 1 commit into from
Nov 11, 2021
Merged

Conversation

Alevsk
Copy link
Contributor

@Alevsk Alevsk commented Nov 11, 2021

This PR includes many fixes and refactors for oauth2 authentication and
login endpoints, ie:

  • Invalid login returns 403 instead of 500 error
  • Removed the session token from console/operator user credentials login, oauth flow login and change-password api responses
  • Removed session token from localStorage
  • Added styles for oauth_callback page and display more descriptive
    errors for debugging
  • Success logins returns 204 instead of 200
  • Removed unused swagger apis and code from both, operator and console
    projects
  • Operator Oauth2 login flow was not validating anything, now it does

Error on oauth_callback page before

Screen Shot 2021-11-10 at 18 43 32

Error on oauth_callback page now

Screen Shot 2021-11-10 at 18 28 02

Signed-off-by: Lenin Alevski alevsk.8772@gmail.com

@harshavardhana
Copy link
Member

Some integration tests are failing with MinIO @Alevsk

@Alevsk
Copy link
Contributor Author

Alevsk commented Nov 11, 2021

Some integration tests are failing with MinIO @Alevsk

These tests are failing on master already, I'll investigated why they are failing

@harshavardhana
Copy link
Member

These tests are failing on master already, I'll investigated why they are failing

No they are not @Alevsk https://github.com/minio/console/runs/4174881009?check_suite_focus=true - I ran them a few times already.

@harshavardhana
Copy link
Member

No they are not @Alevsk https://github.com/minio/console/runs/4174881009?check_suite_focus=true - I ran them a few times already.

You can test locally make test-integration

@Alevsk
Copy link
Contributor Author

Alevsk commented Nov 11, 2021

No they are not @Alevsk https://github.com/minio/console/runs/4174881009?check_suite_focus=true - I ran them a few times already.

You can test locally make test-integration

I'm looking at this right now

@Alevsk Alevsk force-pushed the login-fix branch 3 times, most recently from d9251b3 to 0a036d5 Compare November 11, 2021 21:23
This PR includes many fixes and refactors for oauth2 authentication and
login endpoints, ie:

- Invalid login returns `403` instead of `500` error
- Removed the session token from console/operator `user credentials
  login`, `oauth flow login` and `change-password` api responses
- Removed session token from localStorage
- Added styles for oauth_callback page and display more descriptive
  errors for debugging
- Success logins returns `204` instead of `200`
- Removed unused swagger apis and code from both, operator and console
  projects
- Operator `Oauth2` login flow was not validating anything, now it does

Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OAuth2 - Not decoded code param in LoginCallback
3 participants