This is an automated email from the ASF dual-hosted git repository.
lahirujayathilake pushed a change to branch custos-signer
in repository https://gitbox.apache.org/repos/asf/airavata-custos.git
from 8908fa7ef OIDC token validation and tests
add 2245275a8 Add principal (unix account name) authorization layer
No new revisions were added by this update.
Summary of changes:
.../signer/service/auth/OidcTokenValidator.java | 32 +++++-
.../config/PrincipalValidatorConfiguration.java | 60 +++++++++++
.../signer/service/grpc/SshSignerGrpcService.java | 81 ++++++++++++--
.../validation/COmanagePrincipalValidator.java | 60 +++++++++++
.../validation/InvalidPrincipalException.java | 18 ++--
.../service/validation/NoOpPrincipalValidator.java | 47 ++++++++
.../validation/PrincipalNotAllowedException.java | 19 ++--
.../validation/PrincipalValidationException.java | 29 +++--
.../validation/PrincipalValidationResult.java | 45 ++++++++
.../service/validation/PrincipalValidator.java | 46 ++++++++
.../validation/SignerValidationProperties.java | 120 +++++++++++++++++++++
.../handlers/main.yml => application-test.yml} | 12 +--
.../src/main/resources/application.yml | 14 ++-
13 files changed, 536 insertions(+), 47 deletions(-)
create mode 100644
signer/signer-service/src/main/java/org/apache/custos/signer/service/config/PrincipalValidatorConfiguration.java
create mode 100644
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/COmanagePrincipalValidator.java
copy
access-ci-service/src/main/java/org/apache/custos/access/ci/service/repo/ProjectRepository.java
=>
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/InvalidPrincipalException.java
(69%)
create mode 100644
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/NoOpPrincipalValidator.java
copy application/src/main/java/org/apache/custos/CustosApplication.java =>
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/PrincipalNotAllowedException.java
(66%)
copy application/src/main/java/org/apache/custos/CustosApplication.java =>
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/PrincipalValidationException.java
(57%)
create mode 100644
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/PrincipalValidationResult.java
create mode 100644
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/PrincipalValidator.java
create mode 100644
signer/signer-service/src/main/java/org/apache/custos/signer/service/validation/SignerValidationProperties.java
copy
signer/signer-service/src/main/resources/{ansible-role/custos-signer-trust/handlers/main.yml
=> application-test.yml} (85%)
