IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-20 11:48:34 -06:00
Code Issues Packages Projects Releases Wiki Activity

AuthN: Set access token name (#94471)

Browse Source 
* Set access token name
This commit is contained in:
Karl Persson 2024-10-09 17:08:11 +02:00 committed by GitHub
parent 322dccdb4d
commit ace177f20a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/services/authn/clients/ext_jwt.go
View File

@ -185,10 +185,10 @@ func (s *ExtendedJWT) authenticateAsService(accessTokenClaims authlib.Claims[aut
return &authn.Identity{ return &authn.Identity{
ID: id, ID: id,
UID: id, UID: id,
Name: id,
Type: t, Type: t,
OrgID: s.cfg.DefaultOrgID(), OrgID: s.cfg.DefaultOrgID(),
AccessTokenClaims: &accessTokenClaims, AccessTokenClaims: &accessTokenClaims,
IDTokenClaims: nil,
AuthenticatedBy: login.ExtendedJWTModule, AuthenticatedBy: login.ExtendedJWTModule,
AuthID: accessTokenClaims.Subject, AuthID: accessTokenClaims.Subject,
AllowedKubernetesNamespace: accessTokenClaims.Rest.Namespace, AllowedKubernetesNamespace: accessTokenClaims.Rest.Namespace,

4
pkg/services/authn/clients/ext_jwt_test.go
View File

@ -228,6 +228,7 @@ func TestExtendedJWT_Authenticate(t *testing.T) {
want: &authn.Identity{ want: &authn.Identity{
ID: "this-uid", ID: "this-uid",
UID: "this-uid", UID: "this-uid",
Name: "this-uid",
Type: claims.TypeAccessPolicy, Type: claims.TypeAccessPolicy,
OrgID: 1, OrgID: 1,
AccessTokenClaims: &validAccessTokenClaims, AccessTokenClaims: &validAccessTokenClaims,
@ -246,6 +247,7 @@ func TestExtendedJWT_Authenticate(t *testing.T) {
want: &authn.Identity{ want: &authn.Identity{
ID: "this-uid", ID: "this-uid",
UID: "this-uid", UID: "this-uid",
Name: "this-uid",
Type: claims.TypeAccessPolicy, Type: claims.TypeAccessPolicy,
OrgID: 1, OrgID: 1,
AccessTokenClaims: &validAccessTokenClaimsWildcard, AccessTokenClaims: &validAccessTokenClaimsWildcard,
@ -343,6 +345,7 @@ func TestExtendedJWT_Authenticate(t *testing.T) {
want: &authn.Identity{ want: &authn.Identity{
ID: "this-uid", ID: "this-uid",
UID: "this-uid", UID: "this-uid",
Name: "this-uid",
Type: claims.TypeAccessPolicy, Type: claims.TypeAccessPolicy,
OrgID: 1, OrgID: 1,
AccessTokenClaims: &validAccessTokenClaimsWithStackSet, AccessTokenClaims: &validAccessTokenClaimsWithStackSet,
@ -369,6 +372,7 @@ func TestExtendedJWT_Authenticate(t *testing.T) {
want: &authn.Identity{ want: &authn.Identity{
ID: "this-uid", ID: "this-uid",
UID: "this-uid", UID: "this-uid",
Name: "this-uid",
Type: claims.TypeAccessPolicy, Type: claims.TypeAccessPolicy,
OrgID: 1, OrgID: 1,
AccessTokenClaims: &validAccessTokenClaimsWithDeprecatedStackClaimSet, AccessTokenClaims: &validAccessTokenClaimsWithDeprecatedStackClaimSet,