tt daemon auth - Githubissues

tarantool / tt

Command-line utility to manage Tarantool applications

Other

101 stars 12 forks source link

Open unera opened 3 years ago

unera commented 3 years ago

The module

reads tarantool.yaml
section tvisord.auth contains
- method (default - basic)
- database (default - 'tvisord/htpasswd')

Commands

$ tt tvisordauth --method
basic

$ tt tvisordauth --check "basic dXNlcjpwYXNzd29yZA=="
ok

If authorisation is not configured, then --method returns disabled, --check returns ok for every request.

LeonidVas commented 3 years ago

Seems like this task should be in https://github.com/tarantool/tvisor .

Totktonada commented 3 years ago

@LeonidVas I would like to see a developer side decomposition.

LeonidVas commented 2 years ago

In the first stage, I propose to add authentication based on the following points:

authentication is considered per env
only "basic access authentication" is implemented
necessary to track changes in the tarantool.yaml configuration to update credentials if they are changed in tarantool.yaml

LeonidVas commented 2 years ago

Yet several comments:

credentials of env are stored in the htpasswd files (see https://github.com/tarantool/tt/issues/23#issue-1014294532) near tarantool.yaml or in the location specified in tarantool.yaml
tt daemon configcheck command is used to check the configuration
tt daemon reload (by SIGHUP signal) command is used to update the current daemon configuration
If auth is not configured, an error 511 will be returned when trying to communicate with this env.

LeonidVas commented 2 years ago