Skip to content

jwt_authn: make from_cookies JWT removal behaviour similar to from_params - #17985

Merged
lizan merged 2 commits into
envoyproxy:mainfrom
theshubhamp:theshubhamp/drop-cookie-remove-panic
Sep 17, 2021
Merged

lizan merged 2 commits into
envoyproxy:mainfrom
theshubhamp:theshubhamp/drop-cookie-remove-panic

Conversation

@theshubhamp

@theshubhamp theshubhamp commented Sep 3, 2021

Copy link
Copy Markdown
Contributor

jwt_authn: make from_cookies JWT removal behaviour similar to from_params

Removal of params or cookies after authentication is not implemented as of today.

authenticator.cc calls the removeJwt(...) if forward is set to false (default)
and this leads to an assertion failures caused by NOT_IMPLEMENTED_GCOVR_EXCL_LINE.

Changed removeJwt(...) for JwtCookieLocation to be empty, added test coverage
and updated proto doc to call-out this caveat.

Risk Level: Low
Testing: Tests
Docs Changes: Added caveat to proto docs.
Release Notes: None.
Platform Specific Features: None

Follow up for #17424

Signed-off-by: Shubham Patil theshubhamp@gmail.com

…rams

Removal of params or cookies after authentication is not implemented as of today.

authenticator.cc calls the removeJwt(...) if forward is set to false (default)
and this leads to an assertion failures caused by NOT_IMPLEMENTED_GCOVR_EXCL_LINE.

Changed removeJwt(...) for JwtCookieLocation to be empty, added test coverage
and updated proto doc to call-out this caveat.

Signed-off-by: Shubham Patil <theshubhamp@gmail.com>
@repokitteh-read-only

Copy link
Copy Markdown

CC @envoyproxy/api-shepherds: Your approval is needed for changes made to api/envoy/.
envoyproxy/api-shepherds assignee is @markdroth
CC @envoyproxy/api-watchers: FYI only for changes made to api/envoy/.

🐱

Caused by: #17985 was opened by theshubhamp.

see: more, trace.

@markdroth

Copy link
Copy Markdown
Contributor

/lgtm api

@repokitteh-read-only repokitteh-read-only Bot removed the api label Sep 7, 2021
@theshubhamp

Copy link
Copy Markdown
Contributor Author

cc @lizan, PTAL whenever you can!

…drop-cookie-remove-panic

Signed-off-by: Shubham Patil <theshubhamp@gmail.com>
@theshubhamp

Copy link
Copy Markdown
Contributor Author

Ping! Can someone review this PR ?

@qiwzhang

Copy link
Copy Markdown
Contributor

First commit is good. The second one after the merge seems getting a lot of unrelated changes. Please fix it.

@theshubhamp

theshubhamp commented Sep 15, 2021

Copy link
Copy Markdown
Contributor Author

Thanks for taking a look!

The second one after the merge seems getting a lot of unrelated changes. Please fix it.

The second commit shows unrelated changes because it is a merge commit. I had to merge main back into this branch to resolve conflicts (in generated_api_shadow which was removed on main recently)

Only the 3 files changed in the PR should end up on main as a single commit after merge.

@qiwzhang

Copy link
Copy Markdown
Contributor

LGTM

@lizan
lizan merged commit 5591dbc into envoyproxy:main Sep 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants