Joseph Schorr
|
8887f09ba8
|
Use the instance service key for registry JWT signing
|
2016-06-07 11:58:10 -04:00 |
|
Jake Moshenko
|
8323c51e6e
|
Extend registry auth to support notary JWTs.
|
2016-05-24 13:42:28 -04:00 |
|
Jake Moshenko
|
9221a515de
|
Use the registry API for security scanning
when the storage engine doesn't support direct download url
|
2016-05-04 18:04:06 -04:00 |
|
Joseph Schorr
|
8cd38569d6
|
Fix issue with Docker 1.8.3 and pulling public repos with no creds
We now return the valid subset of auth scopes requested.
Adds a test for this case and adds testing of all returned JWTs in the V2 login tests
|
2016-01-25 15:54:17 -05:00 |
|
josephschorr
|
566a91f003
|
Merge pull request #1160 from coreos-inc/dockerv2authsucks
Fix Docker Auth and our V2 registry paths to support library (i.e. namespace-less) repositories.
|
2016-01-22 16:00:30 -05:00 |
|
Joseph Schorr
|
e4ffaff869
|
Fix Docker Auth and our V2 registry paths to support library (i.e. namespace-less) repositories.
This support is placed behind a feature flag.
|
2016-01-22 15:54:06 -05:00 |
|
josephschorr
|
d00db518df
|
Merge pull request #1153 from coreos-inc/fixtutorial
Fix tutorial by properly publishing user events for V2 API
|
2016-01-22 12:51:47 -05:00 |
|
Joseph Schorr
|
068301ef1f
|
Add more debugging statements to V2 auth
Also fixes a spurious return
|
2016-01-20 18:06:46 -05:00 |
|
Joseph Schorr
|
22b8a562be
|
Fix tutorial by properly publishing user events for V2 API
Fixes #1123
|
2016-01-20 13:42:30 -05:00 |
|
Joseph Schorr
|
ca7d36bf14
|
Handle empty scopes and always send the WWW-Authenticate header, as per spec
Fixes #1045
|
2015-12-15 14:59:47 -05:00 |
|
Joseph Schorr
|
4a4eee5e05
|
Make our JWT subjects better and log using the info
Fixes #1039
|
2015-12-14 14:00:33 -05:00 |
|
Joseph Schorr
|
75a91f0f92
|
Add login tests and fix scope security issue
|
2015-11-24 13:39:16 -05:00 |
|
Jake Moshenko
|
0c44949017
|
Return a 401 when doing a login with bad credentials
|
2015-11-20 18:37:52 -05:00 |
|
Jake Moshenko
|
39d799b1aa
|
Fix anonymous repository pulls
|
2015-11-18 20:11:06 -05:00 |
|
Jake Moshenko
|
c27f91f7cf
|
Fix token pushes for v2 auth, tokens have no user
|
2015-11-18 19:18:12 -05:00 |
|
Jake Moshenko
|
4cc619f4ca
|
Clean up v2 branch to no longer warn about readiness
|
2015-11-16 14:42:43 -05:00 |
|
Joseph Schorr
|
f393236c9f
|
Add repo name check to V2
Fixes #592
|
2015-10-05 14:19:52 -04:00 |
|
Jake Moshenko
|
9c3ddf846f
|
Some fixes and tests for v2 auth
Fixes #395
|
2015-09-10 15:38:57 -04:00 |
|
Joseph Schorr
|
42dba8655c
|
Fix auth and add V2 tests!
|
2015-09-03 12:21:21 -04:00 |
|
Joseph Schorr
|
31fdb94436
|
Enable rate limiting of V2 requests
|
2015-08-25 14:18:34 -04:00 |
|
Jake Moshenko
|
bc29561f8f
|
Fix and templatize the logic for external JWT AuthN and registry v2 Auth.
Make it explicit that the registry-v2 stuff is not ready for prime time.
|
2015-07-17 11:56:15 -04:00 |
|
Jake Moshenko
|
3efaa255e8
|
Accidental refactor, split out legacy.py into separate sumodules and update all call sites.
|
2015-07-17 11:56:15 -04:00 |
|
Jake Moshenko
|
acbcc2e206
|
Start of a v2 API.
|
2015-07-17 11:50:41 -04:00 |
|