| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | auth: logging in, and tokens as bearers | tv | 4 days | 1 | -2/+3 |
| | | | | | | | | | | POST /auth/login (by htpasswd or the proxy), /auth/refresh, /auth/logout, GET /auth/whoami; every request may bring Authorization: Bearer instead of a password. --token-lifetime and --session-lifetime. Auth plan M2. | ||||
| * | access: authorization at the API | tv | 4 days | 1 | -3/+8 |
| | | | | | | | | | | Every request is judged by the registry the node holds: store reads pruned to what the user may read, writes refused where it may not, admin endpoints by protocol capabilities. Without a registry, as before (--protocol-writers for protocol data). Auth plan M1. | ||||
| * | add stream heartbeat | tv | 8 days | 1 | -0/+3 |
| | | |||||
| * | api: allow auth delegation | tv | 9 days | 1 | -3/+4 |
| | | |||||
| * | add documentation | tv | 9 days | 1 | -0/+247 |
