Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JWT cookie fetcher converted to session storage. #3946

Merged
merged 3 commits into from
Aug 30, 2023
Merged

Conversation

bigkevmcd
Copy link
Contributor

Closes

What changed?
Add initial session storage

This pulls in the scs package for storing sessions.

This means that cookies are stored in-memory for now, with a short cookie being sent to the user's browser, we access the old ID and Refresh cookies from the session.

NOTE: This is an initial release of this code, we will provide support for configuring external storage.

Why was this change made?
Support longer cookies

How was this change implemented?

How did you validate the change?
Tests and running the code

Release notes
Switching to session storage for cookies.

Documentation Changes

@bigkevmcd bigkevmcd force-pushed the session-storage branch 4 times, most recently from 101f124 to d9250a0 Compare August 24, 2023 08:39
pkg/server/auth/server.go Outdated Show resolved Hide resolved
@@ -186,12 +187,16 @@ func runCmd(cmd *cobra.Command, args []string) error {
return fmt.Errorf("couldn't get current namespace")
}

sessionManager := scs.New()
// TODO: Make this configurable
sessionManager.Lifetime = 24 * time.Hour
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could make this a flag, but 24h is pretty good for now too.

Copy link
Contributor

@foot foot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested w/ OIDC / no-auth / user-account all seems to be working great

Add initial session storage

This pulls in the scs package for storing sessions.

This means that cookies are stored in-memory for now, with a short
cookie being sent to the user's browser, we access the old ID and
Refresh cookies from the session.
@bigkevmcd bigkevmcd merged commit 20749c9 into main Aug 30, 2023
14 checks passed
@bigkevmcd bigkevmcd deleted the session-storage branch August 30, 2023 09:27
This was referenced Aug 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants