mirror of
https://github.com/scylladb/scylladb.git
synced 2026-06-01 04:26:48 +00:00
33027a36b4
Merged patch set from Piotr Sarna: Refs #5046 This commit adds handling "Authorization:" header in incoming requests. The signature sent in the authorization is recomputed server-side and compared with what the client sent. In case of a mismatch, UnrecognizedClientException is returned. The signature computation is based on boto3 Python implementation and uses gnutls to compute HMAC hashes. This series is rebased on a previous HTTPS series in order to ease merging these two. As such, it depends on the HTTPS series being merged first. Tests: alternator(local, remote) The series also comes with a simple authorization test and a docs update. Piotr Sarna (6): alternator: migrate split() function to string_view alternator: add computing the auth signature config: add alternator_enforce_authorization entry alternator: add verifying the auth signature alternator-test: add a basic authorization test case docs: update alternator authorization entry alternator-test/test_authorization.py | 34 ++++++++ configure.py | 1 + alternator/{server.hh => auth.hh} | 22 ++--- alternator/server.hh | 3 +- db/config.hh | 1 + alternator/auth.cc | 88 ++++++++++++++++++++ alternator/server.cc | 112 +++++++++++++++++++++++--- db/config.cc | 1 + main.cc | 2 +- docs/alternator/alternator.md | 7 +- 10 files changed, 241 insertions(+), 30 deletions(-) create mode 100644 alternator-test/test_authorization.py copy alternator/{server.hh => auth.hh} (58%) create mode 100644 alternator/auth.cc
Scylla developer documentation
This folder (and its subfolders) contain developer-oriented documentation concerning the Scylla codebase. We also have a wiki, which contains additional developer-oriented documentation. There is currently no clear definition of what goes where, so when looking for something be sure to check both.
Seastar documentation can be found here.
User documentation can be found on docs.scylladb.com
For information on how to build Scylla and how to contribute visit HACKING.md and CONTRIBUTING.md.