Harish Govindarajulu
849da76256
oauth: Fallback to using depricated_sub since rhsso now has a new value for sub field (PROJQUAY-9124) ( #4152 )
...
* oauth: Fallback to depricated_sub when sub has new value (PROJQUAY-9124)
Signed-off-by: harishsurf <hgovinda@redhat.com >
* Add test for rhsso backward compatability for deprecated_sub
* Address review comments
* Fix circular import
* Add additional tests for codecov
---------
Signed-off-by: harishsurf <hgovinda@redhat.com >
2025-07-31 08:48:03 -04:00
Sunandadadi
74fd23d7d3
backend: Syncing teams with OIDC group (PROJQUAY-6290) ( #2693 )
2024-02-27 16:53:51 -05:00
Sunandadadi
3e6384e642
sso: adding error log for export compliance (PROJQUAY-6486) ( #2540 )
...
* sso: adding error log for export compliance (PROJQUAY-6486)
* adding if condition for response
2023-12-08 11:38:21 -05:00
Kenny Lee Sin Cheong
5f63b3a7bb
chore: drop deprecated tables and remove unused code (PROJQUAY-522) ( #2089 )
...
* chore: drop deprecated tables and remove unused code
* isort imports
* migration: check for table existence before drop
2023-08-25 12:17:24 -04:00
Syed Ahmed
2db3b186f9
ui: add support for exposing quay UI as a dynamic plugin (PROJQUAY-3203) ( #1799 )
...
* ui: add support for exposing quay UI as a dynamic plugin (PROJQUAY-3203)
* Introduces a new SSO JWT based auth for client side Oauth
* Adds a new entrypoint component for the UI without topnav and sidenav for plugin
* Adds webpack config to build dynamic plugin
2023-04-20 19:05:07 -04:00
Syed Ahmed
f2b70c5031
login: Re-raise the export compliance exception on RHSSO (PROJQUAY-4844) ( #1725 )
...
Fixes an issue where the export compliance exception
gets caught as a generic OAUTH exception
2023-01-24 16:04:40 -05:00
Syed Ahmed
cb590f9a63
login: Add error message for exprot compliance hold (PROJQUAY-4844) ( #1715 )
...
Give users who are blocked more info on the next
steps to contact export compliance
2023-01-23 14:25:09 -05:00
Syed Ahmed
442bb1689d
login: Use the correct username for export compliance (PROJQUAY-4844) ( #1696 )
...
SSO username can be different from quay username. Use the subject
returned from the token and parse the SSO username from the subject
2023-01-06 13:14:50 -05:00
Syed Ahmed
5bd2426400
login: Add subject in debug logs for export compliance (PROJQUAY-4844) ( #1695 )
...
This is to debug errors from export compliance in case of incorrect
matching for usernames
2023-01-05 17:34:56 -05:00
Jonathan King
0fdf96a2d1
rhsso: Add checks for e-mail blocked in export screen (PROJQUAY-2056) ( #1333 )
...
- Check for additional error messages returned from export screen
2022-05-19 10:59:32 -04:00
Brandon Caton
1d2e55b63d
builders: Set imagePullPolicy to always (PROJQUAY-3507) ( #1330 )
...
Currently imagePullPolicy is set to IfNotPresent. This will ignore updates to the builder image.
2022-05-17 10:05:26 -04:00
Jonathan King
b21400b90d
bump: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) ( #1327 )
...
- Bump vault version from 2 to 3
2022-05-13 17:58:40 -04:00
Jonathan King
ca70a501c6
sso: Handle edge case for stage sso only users (PROJQUAY-2056) ( #1326 )
...
- Handle 400 status code gracefully as users in stage sso may not necessarily exist in compliance backend
2022-05-12 16:40:00 -04:00
Jonathan King
42f09298c4
sso: Fix debug statement (PROJQUAY-2056) ( #1325 )
...
- Fix debug statement to print stringified json
2022-05-12 14:57:51 -04:00
Jonathan King
f6e754b561
sso: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) ( #1324 )
...
- Do not pass certificate in verify parameter, instead load automatically from extra_ca_certs dir
2022-05-12 14:31:27 -04:00
Jonathan King
0826ac0e4e
sso: Use requests client in screening call (PROJQUAY-2056) ( #1321 )
...
- Use requests client instead of built in client to prevent cert conflicts
2022-05-12 10:28:27 -04:00
Jonathan King
4e739d30bf
sso: Update mount path for export compliance certificate (PROJQUAY-2056) ( #1320 )
...
- Change mount path from to /stack
2022-05-11 17:31:32 -04:00
Jonathan King
2c3e26a322
sso: Add test for RHSSO OAuth service (PROJQUAY-2056) ( #1317 )
...
- Add test for RHSSOOAuthService class
2022-05-11 16:33:01 -04:00
Jonathan King
ad4bb6f185
compliance: Move export screening to RHSSO class (PROJQUAY-2056) ( #1302 )
...
- Created a RHSSO class
- Put export compliance logic in class override
2022-05-04 16:30:44 -04:00
Joseph Schorr
dce4d3ec1e
Change GitHub Login to send the auth token via header ( #329 )
...
GitHub has deprecated support for passing the token via URL parameter
2020-04-09 11:30:41 -04:00
Tom McKay
e6ae94db8b
'make black' results
2019-12-02 12:23:08 -05:00
Jimmy Zelinskie
9c0dd3b722
initial import for Open Source 🎉
2019-11-12 11:09:47 -05:00