Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Login Middleware with APIToken #9377

Closed
mattiagiupponi opened this issue May 17, 2022 · 0 comments
Closed

Login Middleware with APIToken #9377

mattiagiupponi opened this issue May 17, 2022 · 0 comments
Assignees
Labels
4.0.x enhancement master security Pull requests that address a security vulnerability

Comments

@mattiagiupponi
Copy link
Contributor

mattiagiupponi commented May 17, 2022

Is your feature request related to a problem? Please describe.
By providing an API token (valid) or an authorization header (valid) to the URL, even in the case of Lockdown mode, the page should be shown since is like performing a login

Describe the solution you'd like
The idea is to have a middleware (off by default) that will check if the API key provided is valid or not and assign the user to the request url

Describe alternatives you've considered
N/A

Additional context
N/A

@mattiagiupponi mattiagiupponi added this to the 4.0.0 milestone May 17, 2022
@mattiagiupponi mattiagiupponi self-assigned this May 17, 2022
@afabiani afabiani added master enhancement security Pull requests that address a security vulnerability labels May 18, 2022
@afabiani afabiani removed this from the 4.0.0 milestone May 18, 2022
@mattiagiupponi mattiagiupponi changed the title Improve LOCKDOWN_GEONODE Login Middleware with APIToken May 18, 2022
mattiagiupponi added a commit that referenced this issue May 18, 2022
github-actions bot pushed a commit that referenced this issue May 19, 2022
* Improve lockdown with open embed via token

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* Fix flake8

* [Fixes #9377] remove unwanted changes

* [Fixes #9377] fix broken test
afabiani pushed a commit that referenced this issue May 19, 2022
* Improve lockdown with open embed via token

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* [Fixes #9377] Improve LOCKDOWN_GEONODE

* Fix flake8

* [Fixes #9377] remove unwanted changes

* [Fixes #9377] fix broken test

Co-authored-by: mattiagiupponi <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
4.0.x enhancement master security Pull requests that address a security vulnerability
Projects
None yet
Development

No branches or pull requests

2 participants