lajosnagyuk / hiveforge

The HiveForge Continuous Integration distributed build service
0 stars 0 forks source link

Agent authentication #6

Closed lajosnagyuk closed 3 months ago

lajosnagyuk commented 3 months ago

Masterkey provisions operator_key and any other keys operator_key provisions any other key agent_key reader_key have a set of actions allowed

Api key requests authentication via challenge response, JWT is issued. JWT auto-rotate sorted. All relevant controller endpoints are behind either api key or jwt. Agent uses jwt for register, heartbeat.

This practically implements authentication.