Commit Graph

53 Commits

Author SHA1 Message Date
Jian Qiu
0f0e3a2e79 fix: async refresh revoked tokens (#18204)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-10-06 13:45:07 +08:00
Qiu Jian
400977c27f feature: invalidate auth token 2023-10-05 03:31:24 +08:00
Jian Qiu
23a907319a fix: policy tag filters not effect for shared resources (#17004)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2023-05-11 11:00:07 +08:00
Qiu Jian
8d33582543 fix: auth context with service name 2023-04-04 20:33:12 +08:00
Zexi Li
a24bd3700b feat(mcclient): allow set default authenticate source 2023-02-16 14:41:01 +08:00
ioito
a4a461981a fix(mcclient): 避免休眠后再次启动后admin token失效, 导致用户登录失败 2023-01-17 10:30:33 +08:00
Jian Qiu
21716cefb5 fix: remove mutual dependency of cloudmux on onecloud (#15621)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-12-27 01:21:26 +08:00
Jian Qiu
5d9d253328 fix: mcclient code cleanup 20221106 (#15310)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2022-11-07 02:19:24 +08:00
QIU Jian
293afd2e69 fix: remove apiversion param from session 2022-08-25 09:43:50 +08:00
Qiu Jian
307a381482 feature: pass ntp server by DHCP option 2021-11-10 10:26:58 +08:00
Qu Xuan
4ba014cf5c fix(keystone): avoid panic when call logclient 2021-04-28 19:32:23 +08:00
Yousong Zhou
87f93c2872 mcclient: auth: add SessionCache 2021-02-23 15:29:12 +08:00
Qiu Jian
0eaf20da26 fix(keystone): panic if request with an invalid token
service report nil pointer panic if request with an invalid token string
2020-12-16 16:43:24 +08:00
Qiu Jian
2d39cb4cb0 feature: policy group support 2020-10-24 22:46:46 +08:00
Jian Qiu
34ee80f011 feature: use informer to update endpoint, policy and service configs (#7596)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
2020-08-25 17:45:33 +08:00
Yousong Zhou
c2bca8ab39 Feature/yousong text (#7487)
* notify: log with context info

* region: guests: log with context info

* region: hosts: log with context info

* region: misc: remove redundant log

* region: skus: use NewInternalServerError instead of NewGeneralError

* appsrv: dispatcher: preserve text id

* appsrv: dispatcher: remove commented-out code

* cloudcommon: db_dispatcher: note errors that won't be translated

* cloudcommon: db: rbac: preserve text id

* cloudcommon: caller: preserve text id

* treewide: fix fmt string

* region: guest_actions: preserve text id

* region: guest_actions: fix fmt string

* region: usages: fix fmt string

* mcclient: hosts: remove redundant return value

* cloudcommon: fetch: preserve text id

* region: guest_template: preserve text id

* cloudcommon: db: db_dispatcher: preserve text id

* region: guest_actions: preserve text id

* httperrors: add funcs for wrap lang tag into context

* vendor: golang.org/x/text

* httperrors: error with context

* httperrors: HTTPError

* treewide: fix typo

* treewide: use en in source code

* locales: initial version
2020-08-25 15:26:31 +08:00
Qiu Jian
92f05be309 feature: cloudid saml support phase1 -- framework and api 2020-08-18 01:21:56 +08:00
wanyaoqi
3e759a3a48 misc ha guest fix 2020-07-15 17:04:51 +08:00
Qiu Jian
5ebb18b691 fix: policy-explain not working properly 2020-06-09 22:17:35 +08:00
Zexi Li
95a58cc606 implement generic service informer 2020-05-29 19:59:34 +08:00
Qiu Jian
f4a676575a fix: anonymous user may list resources 2020-05-19 01:13:00 +08:00
Qiu Jian
c35758dd08 fix: avoid using background context 2020-05-14 16:15:54 +08:00
wanyaoqi
f9490b5c56 host session use internal endpoint 2020-04-01 19:59:58 +08:00
Zexi Li
c6be259900 auth: check isAuthed if nil 2020-03-13 19:03:53 +08:00
Qiu Jian
abfac074c3 fix: use globalEndpointType as default endpoint type 2020-02-25 20:27:59 +08:00
wanyaoqi
f0cb9c15d3 fix baremetal register get service url 2019-12-12 17:35:36 +08:00
Yousong Zhou
8ba5986d83 goimports: first run 2019-10-28 06:22:17 +00:00
Zexi Li
3781ccb427 auth: add session-endpoint-type to common options 2019-09-18 11:53:44 +08:00
Zexi Li
aae6f1e6b9 host: use public endpoint 2019-09-17 18:25:56 +08:00
Qiu Jian
77c4a53059 feature: 1. ak/sk auth support 2. a full feature s3gateway works with
Cyberduck

注意:以下两个文件的修改还未被官方合并,所以下次make
mod的时候会被覆盖,需要注意checkout恢复:

vendor/github.com/Azure/azure-sdk-for-go/storage/blockblob.go
vendor/github.com/tencentyun/cos-go-sdk-v5/object_part.go
2019-08-30 00:12:39 +08:00
Qiu Jian
8c799e3a5e fix: client auth needs project domain info 2019-05-31 14:10:56 +08:00
Qiu Jian
b7027934db feature: 3-level policies, system/domain/project 2019-05-31 13:56:02 +08:00
Qiu Jian
5a660987e6 feature: keystone support phase 1 2019-05-17 13:53:45 +08:00
Qiu Jian
004d9b6f95 update copyright headers of all source 2019-03-29 14:47:48 +08:00
Yousong Zhou
8fe4f2ec98 treewide: group imports with goimports
./goimports -w -local yunion.io/x/onecloud/ -corp yunion.io/x/ $GOPATH/src/yunion.io/x/onecloud/{cmd,pkg}
2019-03-13 10:46:12 +00:00
wanyaoqi
f2df8b4816 fix adminCredential is nil 2019-03-05 11:40:04 +08:00
李泽玺
2a3f9596ba Automatic merge from release/2.5.0 -> release/2.6.0
* commit '695ed4cbd3f3b1c4b5ccd603c23668ae2acd55ad':
  fix: temporay auth failure may invalidate valid admintoken
2019-02-21 12:10:30 +08:00
李泽玺
695ed4cbd3 Automatic merge from release/2.4.0 -> release/2.5.0
* commit '9e24e124f49123376490a091665e33c229a74db1':
  fix: temporay auth failure may invalidate valid admintoken
2019-02-21 12:10:29 +08:00
Qiu Jian
588976672f fix: temporay auth failure may invalidate valid admintoken 2019-02-21 12:08:19 +08:00
Qiu Jian
0e3f2e160c temp commit 2019-01-30 21:06:48 +08:00
Qiu Jian
2e587bd6ab glance重构 update 1
Conflicts:
	Gopkg.lock
	pkg/appsrv/appsrv.go
	pkg/cloudcommon/options.go
	pkg/compute/models/hosts.go
	pkg/compute/models/quotas.go
	pkg/compute/service/service.go
	pkg/mcclient/mcclient.go
2018-12-26 22:52:13 +08:00
wanyaoqi
742a67b0f8 client session add context 2018-12-25 13:33:33 +08:00
Qiu Jian
bc02b3b433 1.
取消userCred.IsSystemAdmin(),在使用policy的应用中,通过userCred.IsAdminAllow判断是否是管理员且具备相应的权限。获取token时,需要传入policy.FilterPolicyCredential,将普通userCred转换成支持rbac的userCred
2. 在应用启动时候,必须设置 SetServiceType,否则退出
2018-11-30 23:00:11 +08:00
Qiu Jian
2734d2f5db 增加user/guest两个权利等级 2018-11-16 01:32:01 +08:00
Qiu Jian
5a8bd48485 改进:rpc支持 2018-10-29 22:10:00 +08:00
wanyaoqi
6d21c7e0d2 baremetal ops
some bugfix
make dep
2018-10-23 21:01:00 +08:00
Qiu Jian
575ea95525 改进:允许climc指定tls证书,允许服务指定tls证书 2018-10-17 16:45:11 +08:00
Zexi Li
84ee48335b fix: region task notify not work 2018-10-11 19:04:11 +08:00
Qiu Jian
a301ee4243 修正:region刚启动未获得token时,验证API请求报500错误 2018-08-30 14:44:16 +08:00
Qiu Jian
122c1d63f2 bugfixs for aliyun server create/delete 2018-08-25 16:02:26 +08:00