debian-forge-composer/docs/news
sanne 4a057bf3d5 auth: OpenID/OAUth2 middleware
2 configurations for the listeners are now possible:
- enableJWT=false with client ssl auth
- enableJWT=true with https

Actual verification of the tokens is handled by
https://github.com/openshift-online/ocm-sdk-go.

An authentication handler is run as the top level handler, before any
routing is done. Routes which do not require authentication should be
listed as exceptions.

Authentication can be restricted using an ACL file which allows
filtering based on JWT claims. For more information see the inline
comments in ocm-sdk/authentication.

As an added quirk the `-v` flag for the osbuild-composer executable was
changed to `-verbose` to avoid flag collision with glog which declares
the `-v` flag in the package `init()` function. The ocm-sdk depends on
glog and pulls it in.
2021-09-04 02:48:52 +02:00
..
27 27 2021-02-04 15:44:39 +01:00
28 28 2021-02-20 17:56:23 +00:00
29 29 2021-03-05 15:01:38 +01:00
30 30 2021-06-10 14:59:08 +02:00
31 31 2021-08-11 14:04:41 +02:00
32 32 2021-08-28 16:41:26 +02:00
33 33 2021-08-30 19:03:46 +02:00
unreleased auth: OpenID/OAUth2 middleware 2021-09-04 02:48:52 +02:00
README.md docs/news: introduce release notes directory 2021-01-15 13:21:12 +01:00

Release Notes

This directory contains release notes for osbuild-composer in the form of short markdown documents, sorted into subdirectories by release.

When proposing a user-visible change, please add a release note into the unreleased directory. The note should explain the change from the perspective of somebody using osbuild-composer and ideally how the change affects them or how they can make use of new functionality.

When preparing a release, a maintainer will rename the unreleased directory and summarize its contents in NEWS.md.