kubeguard / guard

🔑 Kubernetes Authentication & Authorization WebHook Server

https://kubeguard.dev

Apache License 2.0

590 stars 81 forks source link

Open julienstroheker opened 1 year ago

julienstroheker commented 1 year ago

Making sure nonce claim is not been re-used more than once on each requests.

Validating if nonce claim is present as string
Saving each nonce claim value into a map (cache)
Validating that each requests is having a difference nonce claims by checking the values in the cache.
Refactoring big cache library to be used on authn and authz side
Cleaning the cache after TTL pop token expiration + 1minutes by spawning a go routine for each calls

weinong commented 1 year ago

@julienstroheker is this PR still open?

julienstroheker commented 1 year ago

Yes. I was waiting the UT refactor pr to merge first.

julienstroheker commented 9 months ago

Still holding this PR due to changes we do on RBAC. This requires more tests + to review PR comments.

PLEASE DO NOT MERGE