Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Instansdelegering | Utvide testtools tokengenerator PlatformAccessToken med app cluster token support #827

Closed
Tracked by #825
jonkjetiloye opened this issue Sep 20, 2024 · 1 comment
Closed
Tracked by #825

Instansdelegering | Utvide testtools tokengenerator PlatformAccessToken med app cluster token support #827

jonkjetiloye opened this issue Sep 20, 2024 · 1 comment
Assignees
@jonkjetiloye
Labels
task

Comments

@jonkjetiloye
Copy link
Member

jonkjetiloye commented Sep 20, 2024 •
edited
Loading

Beskrivelse

For å kunne teste instansdelegerings API vi utvikler for Apps trenger vi å få utvidet GetPlatformAccessToken funksjonen i generatoren med mulighet for å overstyre issuer fra "platform" til en gitt tjenesteeier org.

Problemstillingen med en slik funksjon er at den må ta tilgang til sertifikat i appcluster for tjenesteeier org. Det er kanskje dermed rimelig at dette bare implementeres for test tjenesteeieren: ttd

Funksjonen må fra dagens:
https://altinn-testtools-token-generator.azurewebsites.net/api/GetPlatformAccessToken?env=at22&app=platform

utvides med org url parameter som da benyttes for å i stedet signere med ttd app cluster sertifikat:
https://altinn-testtools-token-generator.azurewebsites.net/api/GetPlatformAccessToken?env=at22&org=ttd&app=apps-test

Avklaringer

  • Hvordan få tilgang til ttd app cluster sertifikat. Svar: Rune
@jonkjetiloye jonkjetiloye mentioned this issue Sep 20, 2024
Open
@jonkjetiloye jonkjetiloye moved this from New to Ready for Sprint in Team Tilgangsstyring & Kontroll Sep 20, 2024
@jonkjetiloye jonkjetiloye moved this from Ready for Sprint to 👷In Progress in Team Tilgangsstyring & Kontroll Sep 25, 2024
@jonkjetiloye jonkjetiloye self-assigned this Sep 25, 2024
jonkjetiloye pushed a commit to Altinn/AltinnTestTools that referenced this issue Sep 25, 2024
Added TTD org issuer support for PlatformAccessTokens
6b18e3e 
- [#827](Altinn/altinn-access-management#827)

Test serviceowner Testdepartementet (ttd) has been added as a valid issuer of PlatformAccessTokens, in order to support both manual and automated testing of Altinn 3 Platform APIs provided to App-backend solutions running in a service owners own cluster.

These tokens are use the serviceowner's org code as issuer (iss claim) and are signed with a private certificate available for all apps in the cluster.
@jonkjetiloye jonkjetiloye mentioned this issue Sep 25, 2024
Merged
5 tasks
jonkjetiloye pushed a commit to Altinn/AltinnTestTools that referenced this issue Sep 27, 2024
Added own config value for mapping KV used for getting cert for TTD a…
fc1c88e 
…ccess tokens

- [#827](Altinn/altinn-access-management#827)
@jonkjetiloye jonkjetiloye mentioned this issue Sep 27, 2024
Merged
5 tasks
jonkjetiloye pushed a commit to Altinn/AltinnTestTools that referenced this issue Sep 27, 2024
PlatformAccessToken | Added support for dash (-) character in app name
60a210a 
- [#827](Altinn/altinn-access-management#827)
@jonkjetiloye jonkjetiloye mentioned this issue Sep 27, 2024
Merged
5 tasks
@jonkjetiloye
Copy link
Member Author

AltinnTestTools updated with support for PlatformAccessTokens signed with TTD's app cluster certificate for AT22.
Support for further environments will simply need update of config for the function app and upload of the certificates to the keyvault

@github-project-automation github-project-automation bot moved this from 👷In Progress to ✅ Done in Team Tilgangsstyring & Kontroll Sep 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jonkjetiloye jonkjetiloye

Labels
task
Projects
Team Tilgangsstyring & Kontroll
Archived in project
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jonkjetiloye