windmill-labs / windmill

Open-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal.
https://windmill.dev
Other
10.91k stars 531 forks source link

feat: add tag filtering to external JWT authentication #4425

Closed HugoCasa closed 1 month ago

HugoCasa commented 1 month ago

[!IMPORTANT] Add tag filtering for JWT authentication by modifying scope handling and SQL queries in the backend.

  • Behavior:
    • Add tag filtering for JWT authentication in windmill-api/src/jobs.rs and windmill-api/src/users.rs.
    • Modify check_scopes to handle jobs: and run: scope prefixes.
    • Introduce get_scope_tags to extract tags from JWT scopes.
  • JWT Claims:
    • Add scopes field to JWTAuthClaims in auth.rs.
  • SQL Queries:
    • Update SQL queries in list_queue_jobs_query and list_completed_jobs_query to filter by tags.
  • Misc:
    • Update ee-repo-ref.txt to new commit hash.

This description was created by Ellipsis for 20e2c2484372634aa5c3d032517e9e366c504878. It will automatically update as commits are pushed.

cloudflare-workers-and-pages[bot] commented 1 month ago

Deploying windmill with  Cloudflare Pages  Cloudflare Pages

Latest commit: 20e2c24
Status: ✅  Deploy successful!
Preview URL: https://05a394cf.windmill.pages.dev
Branch Preview URL: https://hugo-win-373-tag-filtering-j.windmill.pages.dev

View logs