flanksource / github-app

1 stars 2 forks source link

protect runner api #12

Closed philipstaffordwood closed 1 year ago

philipstaffordwood commented 4 years ago

Closes https://github.com/flanksource/github-app/issues/8

This adds a basic JWT check to the /dispense/github-runner-token endpoint.

It also adds a basic auth server endpoint for OAuth 2.0 Client Credentials grant type authentication to serve JWT tokens signed with a symmetric secret (since the Client Credentials flow is the most suitable and Dex doesn't provide this flow).