-
Notifications
You must be signed in to change notification settings - Fork 189
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add authentication middleware to feed-discovery, refactor and update test coverage to 100% #2136
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
humphd
added
area: microservices
area: satellite
Issues related to the Satellite microservice project
type: security
Security concerns
type: test
Creation and development of test
labels
Apr 12, 2021
humphd
force-pushed
the
authorize-feed-parser
branch
from
April 12, 2021 22:48
f23c3d3
to
397a422
Compare
PedroFonsecaDEV
previously approved these changes
Apr 12, 2021
expect(res.status).toBe(200); | ||
expect(res.body).toEqual(result); | ||
done(); | ||
}); | ||
|
||
it('should return 401 if no authorization token is included in headers', async (done) => { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
I can't seem to get CI to pass, it's failing with this bizarre error:
This is unrelated to what I'm touching, so I have no idea what's happening. I wonder if it's npm cache on GitHub's side? I'll try re-triggering again in a bit, see if it sorts itself out. |
humphd
changed the title
Add authentication middleware to feed-parser, refator and update test coverage to 100%
Add authentication middleware to feed-discovery, refator and update test coverage to 100%
Apr 13, 2021
birtony
changed the title
Add authentication middleware to feed-discovery, refator and update test coverage to 100%
Add authentication middleware to feed-discovery, refactor and update test coverage to 100%
Apr 13, 2021
humphd
force-pushed
the
authorize-feed-parser
branch
from
April 13, 2021 15:02
e658bb6
to
977a412
Compare
humphd
force-pushed
the
authorize-feed-parser
branch
from
April 13, 2021 15:32
977a412
to
d451d20
Compare
tonyvugithub
approved these changes
Apr 13, 2021
PedroFonsecaDEV
approved these changes
Apr 13, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
area: microservices
area: satellite
Issues related to the Satellite microservice project
type: security
Security concerns
type: test
Creation and development of test
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I've updated the feed-parser service to require a user to be authenticated. I think it's a bit of a security risk to leave this open on the internet for anyone to hit, since it will download code from any URL you give it. Now you need to login first, but then any Seneca/Telescope user can do it (e.g., during signup).
Writing the code, I had to adjust a few things: