0.4.0
Changes in 0.4.0
Summary
- Bugfix - Accounts service response was ignored: #43
- Bugfix - Fix x-access-token in header: #41
- Change - Point /data endpoint to reva frontend: #45
- Change - Send autocreate home request to reva gateway: #51
- Change - Update to new accounts API: #39
- Enhancement - Retrieve Account UUID From User Claims: #36
- Enhancement - Create account if it doesn't exist in ocis-accounts: #55
- Enhancement - Disable keep-alive on server-side OIDC requests: #268
- Enhancement - Make jwt secret configurable: #41
- Enhancement - Respect account_enabled flag: #53
Details
-
Bugfix - Accounts service response was ignored: #43
We fixed an error in the AccountUUID middleware that was responsible for ignoring an account
uuid provided by the accounts service. -
Bugfix - Fix x-access-token in header: #41
We fixed setting the x-access-token in the request header, which was broken before.
-
Change - Point /data endpoint to reva frontend: #45
Adjusted example config files to point /data to the reva frontend.
-
Change - Send autocreate home request to reva gateway: #51
Send autocreate home request to reva gateway
-
Change - Update to new accounts API: #39
Update to new accounts API
-
Enhancement - Retrieve Account UUID From User Claims: #36
OIDC Middleware can make use of uuidFromClaims to trade claims.Email for an account's UUID.
For this, a general purpose cache was added that caches on a per-request basis, meaning
whenever the request parameters match a set of keys, the cached value is returned, saving a
round trip to the accounts service that otherwise would happen in every single request. -
Enhancement - Create account if it doesn't exist in ocis-accounts: #55
The accounts_uuid middleware tries to get the account from ocis-accounts. If it doens't exist
there yet the proxy creates the account using the ocis-account api. -
Enhancement - Disable keep-alive on server-side OIDC requests: #268
This should reduce file-descriptor counts
-
Enhancement - Make jwt secret configurable: #41
We added a config option for the reva token manager JWTSecret. It was hardcoded before and is now
configurable. -
Enhancement - Respect account_enabled flag: #53
If the account returned by the accounts service has the account_enabled flag set to false, the
proxy will return immediately with the status code unauthorized.