Tamo
4d308d5237
Improve the health route by ensuring lmdb is not down
...
And refactorize slightly the auth controller.
2023-04-06 15:31:42 +02:00
Louis Dureuil
14c4a222da
Authentication: AuthFilter::allow_index_creation both check that the index is authorized and the IndexCreate action
2023-02-22 16:37:13 +01:00
Louis Dureuil
690bb2e5cc
Authentication: Make allow_index_creation a private field
2023-02-22 16:35:52 +01:00
Louis Dureuil
d0f2c9c72e
Authentication: Make search_rules optional in AuthFilter
2023-02-22 16:35:52 +01:00
Louis Dureuil
42577403d8
Authentication: Directly pass the authfilter to the index scheduler
2023-02-22 16:35:52 +01:00
Louis Dureuil
c8c5944094
Authentication: is_index_authorized takes into account API key indexes even with a tenant token
2023-02-22 16:35:52 +01:00
Clément Renault
764df24b7d
Make clippy happy (again)
2023-02-09 13:21:20 +01:00
Clément Renault
4570d5bf3a
Merge remote-tracking branch 'origin/main' into temp-wildcard
2023-02-09 13:14:05 +01:00
Kerollmops
a36b1dbd70
Fix the tasks with the new patterns
2023-02-01 18:21:45 +01:00
Kerollmops
d563ed8a39
Making it work with index uid patterns
2023-02-01 17:51:30 +01:00
Kerollmops
ec7de4bae7
Make it work for any all routes including stats and index swaps
2023-01-25 16:12:40 +01:00
Tamo
c92948b143
Compute the size of the auth-controller, index-scheduler and all update files in the global stats
2023-01-25 11:25:02 +01:00
Tamo
d0988e115f
fix the patch of description and name for the api-key
2023-01-18 19:07:26 +01:00
Loïc Lecrenier
9194508a0f
Refactor query parameter deserialisation logic
2023-01-17 11:07:07 +01:00
Loïc Lecrenier
b0b7ad7caf
Apply review suggestions
2023-01-11 19:08:39 +01:00
Loïc Lecrenier
1fc11264e8
Refactor deserr integration
2023-01-11 19:08:39 +01:00
Tamo
4b6ffe0cd1
Update meilisearch-auth/src/lib.rs
2023-01-02 16:33:02 +01:00
Louis Dureuil
66e18eae79
auth: add generate_master_key function
2022-12-22 11:55:27 +01:00
Loïc Lecrenier
7b93ba40bd
Reimplement task queries to account for special index swap rules
2022-10-27 11:44:51 +02:00
Clément Renault
80b2e70ee7
Introduce a rustfmt file
2022-10-27 11:35:05 +02:00
Tamo
d976e680c5
first mostly working version
2022-10-27 11:34:06 +02:00
Tamo
7034803712
move the API key in meilisearch_types
2022-10-27 11:34:02 +02:00
Many the fish
37dc6537c3
Fix api keys bugs ( #2734 )
...
* Add some tests
* Disallow index creation when API key doesn't havec explicitelly the right on the creating index
* Fix lazy index creation with `indexes.*` action
2022-09-06 15:13:09 +02:00
ManyTheFish
a146fd45b9
Format API keys in hexa instead of base64
2022-07-05 16:14:18 +02:00
pierre-l
b8745420da
Use the IndexUid and StarOr in meilisearch_auth::Key
...
Move `meilisearch_http::routes::StarOr` to `meilisearch_types::star_or`
Fixes #2158
2022-06-09 16:14:15 +02:00
ManyTheFish
4512eed8f5
Fix PR comments
2022-06-01 18:06:20 +02:00
ManyTheFish
b3c8915702
Make small changes and renaming
2022-06-01 16:08:42 +02:00
ManyTheFish
96a5791e39
Add uid and name fields in keys
2022-06-01 16:07:44 +02:00
ad hoc
d6400aef27
remove async from meilsearch-authentication
2022-03-02 18:22:34 +01:00
ad hoc
4fbb83a34d
bug(snapshot): Correctly open environments in snapshots
2022-02-28 12:37:30 +01:00
Irevoire
05c8d81e65
chore: get rid of chrono in favor of time
...
Chrono has been unmaintened for a few month now and there is a CVE on it.
make clippy happy
bump milli
2022-02-16 18:14:29 +01:00
ManyTheFish
7ca647f0d0
feat(auth): Implement Tenant token
...
Make meilisearch support JWT authentication signed with meilisearch API keys
using HS256, HS384 or HS512 algorithms.
Related spec: https://github.com/meilisearch/specifications/pull/89
Fix #1991
2022-01-27 08:25:39 +01:00
Maxime Legendre
a845cd8880
Fix(auth): Forbid index creation on alternates routes
...
Forbid index creation on alternates routes when the action `index.create` is not given
fix #2024
2021-12-20 14:48:18 +01:00
many
ee7970f603
feat(auth): Extend API keys
...
- Add API keys in snapshots
- Add API keys in dumps
- Rename action indexes.add to indexes.create
- fix QA #1979
fix #1979
fix #1995
fix #2001
fix #2003
related to #1890
2021-12-14 17:33:39 +01:00
many
ffefd0caf2
feat(auth): API keys
...
implements:
https://github.com/meilisearch/specifications/blob/develop/text/0085-api-keys.md
- Add tests on API keys management route (meilisearch-http/tests/auth/api_keys.rs)
- Add tests checking authorizations on each meilisearch routes (meilisearch-http/tests/auth/authorization.rs)
- Implement API keys management routes (meilisearch-http/src/routes/api_key.rs)
- Create module to manage API keys and authorizations (meilisearch-auth)
- Reimplement GuardedData to extend authorizations (meilisearch-http/src/extractors/authentication/mod.rs)
- Change X-MEILI-API-KEY by Authorization Bearer (meilisearch-http/src/extractors/authentication/mod.rs)
- Change meilisearch routes to fit to the new authorization feature (meilisearch-http/src/routes/)
- close #1867
2021-12-06 09:52:41 +01:00
