Code

Fix/13 improve auth security#14

Code

Merged

tahpot merged 46 commits intorelease/2.0-acaciaverida/storage-node:release/2.0-acaciafrom fix/13-improve-auth-securityverida/storage-node:fix/13-improve-auth-securityCopy head branch name to clipboardOct 10, 2022

+4,440-3,464

Commits

Commits on Apr 3, 2022

• Support running a single test or multiple. Add JWT dependency.

  

  Chris

  committed
  c401b22

  Copy full SHA for c401b22

• Implement JWT authorization. Use a new consent message for signature verification.

  

  Chris

  committed
  216a828

  Copy full SHA for 216a828

• Update permission tests to support JWT auth.

  

  Chris

  committed
  3ef1235

  Copy full SHA for 3ef1235

• Implement JWT tests

  

  Chris

  committed
  0b8f929

  Copy full SHA for 0b8f929

• Add README instructions for enabling JWT auth in CouchDb

  

  Chris

  committed
  6d44827

  Copy full SHA for 6d44827

Commits on Apr 4, 2022

• Merge branch 'main' into fix/13-improve-auth-security

  

  Chris

  committed
  5844b0c

  Copy full SHA for 5844b0c

• Fix incorrect merge issues.

  

  Chris

  committed
  9165368

  Copy full SHA for 9165368

Commits on Apr 29, 2022

• Add support for generating and verifying refresh token

  

  Chris

  committed
  0a7583c

  Copy full SHA for 0a7583c

Commits on Apr 30, 2022

• More refresh token unit tests. Add access token support. Db refactor.

  

  Chris

  committed
  821464d

  Copy full SHA for 821464d

Commits on May 2, 2022

• Fix permission unit tests with new refactor.

  

  Chris

  committed
  75d0069

  Copy full SHA for 75d0069

• Update server endpoints to use new auth. Create server integration tests for auth.

  

  Chris

  committed
  286f0fb

  Copy full SHA for 286f0fb

• Hash database name server side before creating

  

  Chris

  committed
  51d931c

  Copy full SHA for 51d931c

• Verify context name when verifying refresh token. Don't generate access token if refresh token is invalid.

  

  Chris

  committed
  48267a3

  Copy full SHA for 48267a3

• Confirm expected user is admin of database before deleting it.

  

  Chris

  committed
  b613681

  Copy full SHA for b613681

• Ensure database names begin with "v"

  

  Chris

  committed
  e06e864

  Copy full SHA for e06e864

• Return an access token and host when requesting a refresh token.

  

  Chris

  committed
  f1ca758

  Copy full SHA for f1ca758

• Support deleteDatabase endpoint

  

  Chris

  committed
  39448ce

  Copy full SHA for 39448ce

• Expand unit tests

  

  Chris

  committed
  6f90e38

  Copy full SHA for 6f90e38

Commits on May 5, 2022

• Split controller into auth and user.

  

  Chris

  committed
  9361a8c

  Copy full SHA for 9361a8c

• Fix broken test

  

  Chris

  committed
  f1a7480

  Copy full SHA for f1a7480

• Fix broken delete database calls

  

  Chris

  committed
  0dbfe07

  Copy full SHA for 0dbfe07

• Remove JWT test no longer required

  

  Chris

  committed
  3adf44e

  Copy full SHA for 3adf44e

Commits on May 6, 2022

• Support invalidating device ID

  

  Chris

  committed
  09db622

  Copy full SHA for 09db622

Commits on May 7, 2022

• Invalidating devices now working correctly with tests

  

  Chris

  committed
  74d4847

  Copy full SHA for 74d4847

• Implement garbage collection

  

  Chris

  committed
  3eaa41b

  Copy full SHA for 3eaa41b

Commits on Aug 23, 2022

• Fix building DSN for public credentials

  

  Chris

  committed
  38a1214

  Copy full SHA for 38a1214

Commits on Aug 30, 2022

• Add CouchDB configuration note around basic auth

  

  Chris

  committed
  d391e9b

  Copy full SHA for d391e9b

• Add more docs

  

  Chris

  committed
  4d0f63b

  Copy full SHA for 4d0f63b

Commits on Aug 31, 2022

• Fix edge case issues identified during testing

  

  Chris

  committed
  137e795

  Copy full SHA for 137e795

• Merge branch 'develop' into fix/13-improve-auth-security

  

  Chris

  committed
  a90966f

  Copy full SHA for a90966f

• Fix yarn dependencies

  

  Chris

  committed
  ae70c70

  Copy full SHA for ae70c70

• Fix example .env files and remove duplicate.

  

  Chris

  committed
  84f4af1

  Copy full SHA for 84f4af1

• Describe how authentication works

  

  Chris

  committed
  ee6bddb

  Copy full SHA for ee6bddb

• Rename to authorization

  

  Chris

  committed
  2f9e190

  Copy full SHA for 2f9e190

• Add missing account-node dev dependency

  

  Chris

  committed
  46af155

  Copy full SHA for 46af155

Commits on Sep 1, 2022

• Fix minor issues with tests. Better config docs in README.

  

  Chris

  committed
  a89716b

  Copy full SHA for a89716b

• Resolve feedback for further review.

  

  Chris

  committed
  d133fd7

  Copy full SHA for d133fd7

• Merge branch 'develop' into fix/13-improve-auth-security

  

  Chris

  committed
  069989d

  Copy full SHA for 069989d

• Fix missed merge issue

  

  Chris

  committed
  f2b7e3a

  Copy full SHA for f2b7e3a

• Support running single test

  

  Chris

  committed
  fd7ff28

  Copy full SHA for fd7ff28

Commits on Sep 2, 2022

• Add support for saving user databases and getting the info as an authorized user. More HTTP status improvements and better checking for valid request params.

  

  Chris

  committed
  cbb988c

  Copy full SHA for cbb988c

• Add missing require for PouchDB

  

  Chris

  committed
  2bb753c

  Copy full SHA for 2bb753c

• Cleanup didsToUsernames

  

  Chris

  committed
  cf06c2f

  Copy full SHA for cf06c2f

• Destructure some vars

  

  Chris

  committed
  edefc67

  Copy full SHA for edefc67

• Add cors requirement to README

  

  Chris

  committed
  63ec142

  Copy full SHA for 63ec142

• Add isTokenValid endpoint to verify a refresh token is still valid and obtain the expiry.

  

  Chris

  committed
  20c3519

  Copy full SHA for 20c3519