Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add /whoami API endpoint #1697

Closed
2 of 3 tasks
micahlee opened this issue Jul 17, 2020 · 0 comments
Closed
2 of 3 tasks

Add /whoami API endpoint #1697

micahlee opened this issue Jul 17, 2020 · 0 comments
Assignees

Comments

@micahlee
Copy link
Contributor

micahlee commented Jul 17, 2020

When setting up network based authentication (with restricted_to) or debugging IP address issues with authentication and audit, it is helpful to observe how Conjur views your API request.

To make this more observable, we should add a new API endpoint /whoami to return the following properties of the request:

  • client_ip: The rails request.ip attribute. This is used for network restrictions and audit. This can contain an unexpected value if load balancers or reverse proxies are not properly configured.

  • user_agent: The rails request.user_agent attribute.

  • account: The account attribute of the access token (if provided on the request, null otherwise).

  • login: The login (username) attribute of the access token (if provided on the request, null otherwise).

  • token_issued_at: The issued timestamp (iat) when the access token was created (if provided on the request, null otherwise).

DoD:

  • API endpoint exists
  • API endpoint is tested in CI
  • API endpoint is documented
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants