![]() closes CNVS-24286 Add JWT (wrapped and signed by shared secret) as a viable authentication method. Also remove deprecation errors from login template TEST PLAN: 1) have ECOSYSTEM_* env vars set (docker helps) 2) login as a user 3) take a token from "/jwts/generate" 4) wrap that token in another token signed with the shared secret (ECOSYSTEM_SECRET, see services_jwt_spec.rb for a way to do this) 5) use the base64 encoded string as a bearer token for canvas 6) try it again in 70 minutes or so (the same token), it should now be expired. Change-Id: I721f42d7c9ca7edc82bc75b116354dd3edc50a88 Reviewed-on: https://gerrit.instructure.com/66110 Reviewed-by: Cody Cutrer <cody@instructure.com> Tested-by: Jenkins QA-Review: August Thornton <august@instructure.com> Product-Review: Ethan Vizitei <evizitei@instructure.com> |
||
---|---|---|
.. | ||
coffeescripts | ||
controllers | ||
helpers | ||
jsx | ||
messages | ||
middleware | ||
models | ||
observers | ||
presenters | ||
serializers | ||
stylesheets | ||
views |