Add JWT support for API and Dashboard #984

samuel-rufi · 2022-01-18T21:47:26Z

Generate a JWT token with: cargo release -- jwt-api

Example request for protected /api/v1/tips:

curl -X 'GET' \
  'http://127.0.0.1:14265/api/v1/tips' \
  -H 'accept: application/json' \
  -H 'authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiIxMkQzS29vV1BydFg1cE1hYlZuaUJ5ZVo4OXh6OWVnWnhQcTRtNnNHNGV0V1Fwb2pjMkNmIiwic3ViIjoiQmVlIiwiYXVkIjoiYXBpIiwibmJmIjoxNjQ3Mjc2NDUxLCJpYXQiOjE2NDcyNzY0NTF9.WMprcjWTEVrszhfeoCEfg3-0nRRFrnRlUUtVeD78Xqs'

You can protect routes with the node config file. Simply add the route you want to protect to the protectedRoutes array. To make routes public use the publicRoutes array.

grtlr

It's cool that this adds functionality, but also makes parts of the code easier to read/maintain. 👍

bee-api/bee-rest-api/src/endpoints/filters.rs

bee-api/bee-rest-api/Cargo.toml

bee-api/bee-rest-api/src/endpoints/config.rs

bee-api/bee-rest-api/src/endpoints/mod.rs

bee-api/bee-rest-api/src/endpoints/routes/api/v1/message_children.rs

bee-api/bee-rest-api/src/endpoints/mod.rs

bee-api/bee-rest-api/src/lib.rs

bee-node/src/lib.rs

bee-node/src/tools/jwt_api.rs

…on filter

� Conflicts: � bee-api/bee-rest-api/src/endpoints/routes/api/v1/output.rs

� Conflicts: � bee-api/bee-rest-api/src/endpoints/mod.rs � bee-node/src/fullnode/builder.rs

Add JWT generation example

documentation/docs/examples.md

… into api-jwt � Conflicts: � bee-node/bee-node/config.chrysalis-comnet.json � bee-node/bee-node/config.chrysalis-comnet.toml

thibault-martinez added c-feature Category - Feature e-medium Experience - Medium n-all Network - All p-medium Priority - Medium wg-api Working Group - API labels Jan 18, 2022

thibault-martinez requested review from thibault-martinez, Adam-Gleave and grtlr and removed request for thibault-martinez January 18, 2022 22:15

samuel-rufi marked this pull request as ready for review January 25, 2022 15:12

samuel-rufi requested a review from Alex6323 as a code owner January 25, 2022 15:12

grtlr suggested changes Jan 25, 2022

View reviewed changes

samuel-rufi changed the base branch from chrysalis-pt-2 to dev February 2, 2022 14:18

samuel-rufi added 2 commits February 2, 2022 16:44

Add API JWT changes

125034a

Add Dashboard JWT changes

93da289

samuel-rufi force-pushed the api-jwt branch from 9184623 to 93da289 Compare February 2, 2022 15:51

samuel-rufi added 12 commits February 4, 2022 12:09

Moving Dashboard auth logic

6987203

Lazy static regex generation; make use of RegexSet; complete permissi…

2e47d38

…on filter

Merge branch 'dev' of https://github.com/iotaledger/bee into api-jwt

477d6c1

� Conflicts: � bee-api/bee-rest-api/src/endpoints/routes/api/v1/output.rs

Format permission.rs

87c5129

Format output.rs

e55c45d

Remove "extern crate" imports; document JWT Bearer

96fafa5

Base64 decode JWT payload to categorize JWT audience

f806f69

Merge branch 'dev' of https://github.com/iotaledger/bee into api-jwt

c8fee98

Format jwt_api.rs

b8f9ffe

Merge branch 'dev' of https://github.com/iotaledger/bee into api-jwt

a6178fa

� Conflicts: � bee-api/bee-rest-api/src/endpoints/mod.rs � bee-node/src/fullnode/builder.rs

Read JWT payload to find out how to validate it correctly

208f6a5

Pass dashboard username

45585b6

samuel-rufi force-pushed the api-jwt branch from fb50094 to 45585b6 Compare February 11, 2022 11:36

samuel-rufi added 4 commits March 28, 2022 12:24

Simplify the Duration parsing from white_flag_solidification_timeout

521a02b

Make use of Copy implementation for Duration

cf95ee1

Avoid computing of the JWT hint for every call.

9ac5223

Make use of Duration in health.rs

a9f4f1b

samuel-rufi requested review from pvdrz and grtlr March 28, 2022 15:10

grtlr previously approved these changes Mar 29, 2022

View reviewed changes

Alex6323 previously approved these changes Mar 29, 2022

View reviewed changes

Update configuration.mdx with REST API fields.

050c48e

Add JWT generation example

samuel-rufi dismissed stale reviews from Alex6323 and grtlr via 050c48e March 29, 2022 14:54

Alex6323 previously approved these changes Mar 29, 2022

View reviewed changes

grtlr previously approved these changes Mar 29, 2022

View reviewed changes

pvdrz previously approved these changes Mar 29, 2022

View reviewed changes

thibault-martinez reviewed Mar 30, 2022

View reviewed changes

documentation/docs/examples.md Show resolved Hide resolved

Update documentation/docs/examples.md

7c3c359

thibault-martinez dismissed stale reviews from pvdrz, grtlr, and Alex6323 via 7c3c359 March 30, 2022 08:54

grtlr previously approved these changes Mar 30, 2022

View reviewed changes

samuel-rufi added 2 commits March 30, 2022 10:57

Merge branch 'mainnet-develop-0.4' of https://github.com/iotaledger/bee…

31a4be2

… into api-jwt � Conflicts: � bee-node/bee-node/config.chrysalis-comnet.json � bee-node/bee-node/config.chrysalis-comnet.toml

Merge remote-tracking branch 'origin/api-jwt' into api-jwt

4efc53c

samuel-rufi dismissed grtlr’s stale review via 4efc53c March 30, 2022 09:01

samuel-rufi requested review from grtlr, Alex6323, pvdrz and thibault-martinez March 30, 2022 15:03

pvdrz approved these changes Mar 30, 2022

View reviewed changes

grtlr approved these changes Mar 30, 2022

View reviewed changes

grtlr merged commit 325b85c into iotaledger:mainnet-develop-0.4 Mar 30, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add JWT support for API and Dashboard #984

Add JWT support for API and Dashboard #984

samuel-rufi commented Jan 18, 2022 •

edited

Loading

grtlr left a comment •

edited

Loading

Add JWT support for API and Dashboard #984

Add JWT support for API and Dashboard #984

Conversation

samuel-rufi commented Jan 18, 2022 • edited Loading

grtlr left a comment • edited Loading

Choose a reason for hiding this comment

samuel-rufi commented Jan 18, 2022 •

edited

Loading

grtlr left a comment •

edited

Loading