Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

allow use of memcached for the auth tokens #5297

Closed
rcarpa opened this issue Mar 1, 2022 · 0 comments
Closed

allow use of memcached for the auth tokens #5297

rcarpa opened this issue Mar 1, 2022 · 0 comments
Assignees
@rcarpa
Labels
Authentication & Authorisation Core & Internals
Milestone
1.27.9

Comments

@rcarpa
Copy link
Contributor

rcarpa commented Mar 1, 2022

Motivation

All other caches were moved from in-memory python dicts to memcached some time ago #5162 . The auth tokens were still kept in memory due to security concerns. Especially for people who may use a separate memcached instance and would be surprised that such information is now leacked.

Modification

Allow setting auth tokens in memcached, but this should be configurable and default to false.
@rcarpa rcarpa self-assigned this Mar 1, 2022
rcarpa added a commit to rcarpa/rucio that referenced this issue Mar 2, 2022
@rcarpa
Core & Internals: allow external cache for auth tokens. Closes rucio#…
2801750 
…5297

Allow setting auth tokens in memcached, but make it configurable and
default this behavior to disabled.
rcarpa added a commit to rcarpa/rucio that referenced this issue Mar 2, 2022
@rcarpa
Core & Internals: allow external cache for auth tokens. Closes rucio#…
5cf1454 
…5297

Allow setting auth tokens in memcached, but make it configurable and
default this behavior to disabled.
rcarpa added a commit to rcarpa/rucio that referenced this issue Mar 2, 2022
@rcarpa
Core & Internals: allow external cache for auth tokens. Closes rucio#…
c35ac00 
…5297

Allow setting auth tokens in memcached, but make it configurable and
default this behavior to disabled.
@bari12 bari12 closed this as completed in c9791eb Mar 7, 2022
bari12 added a commit that referenced this issue Mar 7, 2022
@bari12
Merge pull request #5309 from rcarpa/patch-5297-memcached_for_auth_to…
3c06bb2 
…kens

Core & Internals: allow external cache for auth tokens. Closes #5297
bari12 pushed a commit that referenced this issue Mar 7, 2022
@rcarpa @bari12
Core & Internals: allow external cache for auth tokens. Closes #5297
7f46879 
Allow setting auth tokens in memcached, but make it configurable and
default this behavior to disabled.

Also reduce the duration of token, for #5303
@bari12 bari12 added this to the 1.27.9 milestone Mar 7, 2022
faluchet pushed a commit to faluchet/rucio.rucio that referenced this issue Mar 7, 2022
@rcarpa @faluchet
Core & Internals: allow external cache for auth tokens. Closes rucio#…
cbbe0d0 
…5297

Allow setting auth tokens in memcached, but make it configurable and
default this behavior to disabled.

Also reduce the duration of token, for rucio#5303
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rcarpa rcarpa

Labels
Authentication & Authorisation Core & Internals
Projects
None yet
Milestone
1.27.9
Development

No branches or pull requests
2 participants
@bari12 @rcarpa