Project

General

Profile

Actions
Copy link

Idea #3532

closed

[Keep] Keepstore queries API server to verify tokens

Added by Tom Clegg over 9 years ago. Updated about 5 years ago.

Status:
Closed
Priority:
Normal
Assigned To:
-
Category:
Keep
Target version:
-
Start date:
08/04/2014
Due date:
Story points:
2.0

Description

  • Maintain a cache {token → (is_admin, verified_timestamp, expires_at)} with configurable TTL, so a series of N PUT/DELETE requests doesn't result in N token verifications.
  • The same token cache will also be useful in the future for things like enforcing storage quotas, so please make it easy to add fields to the cache values.
  • The token cache should be used to check validity of the client token during each PUT request (expires_at must not be in the past) and DELETE request (expires_at must not be in the past, and is_admin must be true).
Work in progress:
  • 2769-keep-lookup-admin-tokens branch
  • Very similar code exists already in keepproxy. Refactor this as a module that can be used by both servers?

Subtasks 2 (0 open — 2 closed)

Task #3272: Cache user authentication tokensClosed08/04/2014Actions
Task #3475: Consult API server for user's admin status and scopes.Closed08/08/2014Actions
Actions
Copy link

Also available in: Atom PDF