Skip to content

Fix security modes and add /auth/status endpoint#132

Open
remvee wants to merge 2 commits into
mainfrom
auth-status-endpoint
Open

Fix security modes and add /auth/status endpoint#132
remvee wants to merge 2 commits into
mainfrom
auth-status-endpoint

Conversation

@remvee

@remvee remvee commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

DO NOT MERGE!

Fixes #117 and #129.

Decoding the JWT bearer token is needed to determine if somebody is
logged in or not down stream in the code.
Comment thread src/main/java/oeapi/BearerTokenFilter.java
In all modes accessible and responds with:

  {
    "mode": "private",
    "current": {
      "email": "user@example.com",
      "roles": ["ADMIN"]
    }
  }

- "mode" : backend security mode (ooapi.security.mode)
- "current" : unset when not logged in
- "current.email" : email address of logged in user
- "current.roles" : roles of logged in user
@remvee
remvee force-pushed the auth-status-endpoint branch from 47773dc to d637352 Compare July 3, 2026 10:03
@remvee
remvee marked this pull request as ready for review July 3, 2026 10:13
@remvee
remvee requested a review from losalo July 16, 2026 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Authentication requirements / potential bug

2 participants