Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[add] DisallowBearerToken option to operator to disallow bearer = true #177

Merged
merged 2 commits into from May 9, 2022

Conversation

matthiashanel
Copy link
Contributor

change 1 out of 3 for nats-io/nats-server#3084

matthiashanel added a commit to nats-io/nsc that referenced this pull request Apr 29, 2022
change 2 out of 3 for nats-io/nats-server#3084
corresponds to nats-io/jwt#177

also fixed minor staticcheck issues

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nats-server that referenced this pull request Apr 29, 2022
change 3 out of 3 for #3084
corresponds to:
nats-io/jwt#177
nats-io/nsc#495

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nsc that referenced this pull request Apr 29, 2022
change 2 out of 3 for nats-io/nats-server#3084
corresponds to nats-io/jwt#177

also fixed minor staticcheck issues

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nats-server that referenced this pull request Apr 29, 2022
I modified an existing data structure that held a similar attribute already.
Instead this data structure references the claim.

change 3 out of 3. Fixes #3084
corresponds to:
nats-io/jwt#177
nats-io/nsc#495

Signed-off-by: Matthias Hanel <mh@synadia.com>
@aricart
Copy link
Member

aricart commented May 2, 2022

@matthiashanel not quite sure why this option is at the operator level - would seem that the bearer token could be enabled as a server config option which disables the feature server-wide. The bigger question is shouldn't this be an account-level option - since accounts issue users, seems reasonable that this would be the config where they can bounce them all?

Perhaps both features would be useful.

Copy link
Member

@aricart aricart left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - saved for the other comment.

Signed-off-by: Matthias Hanel <mh@synadia.com>
@aricart
Copy link
Member

aricart commented May 9, 2022

LGTM!

@matthiashanel matthiashanel merged commit 3bcd719 into master May 9, 2022
@matthiashanel matthiashanel deleted the DisallowBearerToken branch May 9, 2022 18:01
matthiashanel added a commit to nats-io/nsc that referenced this pull request May 9, 2022
* [added] support for account option DisallowBearerToken

change 2 out of 3 for nats-io/nats-server#3084
corresponds to nats-io/jwt#177

also fixed minor staticcheck issues
also removed unused ha_assets

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nats-server that referenced this pull request May 16, 2022
change 3 out of 3. Fixes #3084
corresponds to:
nats-io/jwt#177
nats-io/nsc#495

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nats-server that referenced this pull request Jun 13, 2022
change 3 out of 3. Fixes #3084
corresponds to:
nats-io/jwt#177
nats-io/nsc#495

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nats-server that referenced this pull request Jun 28, 2022
change 3 out of 3. Fixes #3084
corresponds to:
nats-io/jwt#177
nats-io/nsc#495

Signed-off-by: Matthias Hanel <mh@synadia.com>
matthiashanel added a commit to nats-io/nats-server that referenced this pull request Jun 29, 2022
* [added] support for jwt account option DisallowBearer

change 3 out of 3. Fixes #3084
corresponds to:
nats-io/jwt#177
nats-io/nsc#495

update jwt library to 2.3.0

Signed-off-by: Matthias Hanel <mh@synadia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants