Check the database for admin status when refreshing JWT
Upgrade some auth dependencies
How to test
To be able to test this, you need your cookies to expire in just slightly longer than 5 minutes (instead of an hour), so edit JwtCreator.java and set ONE_HOUR_IN_MILLISECONDS to 310_000L
Make sure to have RSD_ENVIRONMENT=dev in your .env
docker compose down --volumes && docker compose build --parallel && docker compose up --scale data-generation=0
Sign in, you should be admin
Run in the database DELETE FROM admin_account;; within 10 seconds, you should not be admin anymore
Run in the database INSERT INTO admin_account VALUES ('some-uuid');, where you can find your UUID in your settings; within 10 seconds, you should be admin again
Don't forget to git restore . afterwards
PR Checklist:
[x] Increase version numbers in docker-compose.yml
Check admin status on JWT refresh
Changes proposed in this pull request
How to test
JwtCreator.java
and setONE_HOUR_IN_MILLISECONDS
to310_000L
RSD_ENVIRONMENT=dev
in your.env
docker compose down --volumes && docker compose build --parallel && docker compose up --scale data-generation=0
DELETE FROM admin_account;
; within 10 seconds, you should not be admin anymoreINSERT INTO admin_account VALUES ('some-uuid');
, where you can find your UUID in your settings; within 10 seconds, you should be admin againgit restore .
afterwardsPR Checklist:
docker-compose.yml