chronograf/oauth2
Jared Scheib 9df1630cf8 Add new auth duration CLI option; add client heartbeat; fix logout (#1119)
* User can now set oauth cookie session duration via the CLI to any duration or to expire on browser close

* Refactor GET 'me' into heartbeat at constant interval

* Add ping route to all routes

* Add /chronograf/v1/ping endpoint for server status

* Refactor cookie generation to use an interface

* WIP adding refreshable tokens

* Add reminder to review index.js Login error handling

* Refactor Authenticator interface to accommodate cookie duration and logout delay

* Update make run-dev to be more TICKStack compliant

* Remove heartbeat/logout duration from authentication

* WIP Refactor tests to accommodate cookie and auth refactor

* Update oauth2 tests to newly refactored design

* Update oauth provider tests

* Remove unused oauth2/consts.go

* Move authentication middleware to server package

* Fix authentication comment

* Update authenication documentation to mention AUTH_DURATION

* Update /chronograf/v1/ping to simply return 204

* Fix Makefile run-dev target

* Remove spurious ping route

* Update auth docs to clarify authentication duration

* Revert "Refactor GET 'me' into heartbeat at constant interval"

This reverts commit 298a8c47e1.

Conflicts:
ui/src/index.js

* Add auth test for JWT signing method

* Add comments for why coverage isn't written for some areas of jwt code

* Update auth docs to explicitly mention how to require re-auth for all users on server restart

* Add Duration to Validation interface for Tokens

* Make auth duration of zero yield a everlasting token

* Revert "Revert "Refactor GET 'me' into heartbeat at constant interval""

This reverts commit b4773c15af.

* Rename http status constants and add FORBIDDEN

* Heartbeat only when logged in, notify user if heartbeat fails

* Update changelog

* Fix minor word semantics

* Update oauth2 tests to be in the oauth2_test package

* Add check at compile time that JWT implements Tokenizer

* Rename CookieMux to AuthMux for consistency with earlier refactor

* Fix logout middleware

* Fix logout button not showing due to obsolete data shape expectations

* Update changelog

* Fix proptypes for logout button data shape in SideNav
2017-04-06 11:40:57 -07:00
..
cookies.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
cookies_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
doc.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
github.go Remove unneeded authenticator from github 2017-02-14 23:09:34 -06:00
github_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
google.go Update to fix go linter issues 2017-03-06 10:11:52 -06:00
google_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
heroku.go Update to fix go linter issues 2017-03-06 10:11:52 -06:00
heroku_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
jwt.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
jwt_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
mux.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
mux_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
oauth2.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00
oauth2_test.go Add new auth duration CLI option; add client heartbeat; fix logout (#1119) 2017-04-06 11:40:57 -07:00