Project

General

Profile

Feature #24724

Token authentication support

Added by Marc Mengel 4 months ago. Updated 4 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
-
Start date:
08/06/2020
Due date:
% Done:

0%

Estimated time:
Duration:

Description

There are a couple of areas where token authentication support is needed.

  1. get_grid_credentials_if_needed() needs to not only get x509 certs/proxies
    as needed, but get tokens checking/setting $BEARER_TOKEN and $BEARER_TOKEN_FILE
    as appropriate (see https://github.com/WLCG-AuthZ-WG/bearer-token-discovery/blob/master/specification.md)
  2. the suitable kx509 equivalent for tokens needs to be used in the above
  3. an ifdh getToken call should be added, to go with getProxy
  4. The www_cp.sh script should set "Authorization: Bearer ..." headers appropriately
    for a token set as above when calling curl
  5. ifdh for now should send both types of authentication if available, and let the
    service figure out what it can use.

History

#1 Updated by Marc Mengel 4 months ago

  • Description updated (diff)

Also available in: Atom PDF