Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PB-1282: document the new authentication method. #504

Merged
merged 3 commits into from
Jan 28, 2025

Conversation

adk-swisstopo
Copy link
Member

@adk-swisstopo adk-swisstopo commented Jan 27, 2025

This also:

  • explain what session authentication is for;
  • remove documentation for Basic authentication;
  • remove documentation for old Token authentication;
  • remove documentation for the /get-token endpoint.

This only updates v1 documentation. v0.9 remains unchanged.

@adk-swisstopo adk-swisstopo marked this pull request as draft January 27, 2025 12:30
@adk-swisstopo
Copy link
Member Author

This only updates v1, which should probably not refer to the old authentication mechanism. It does not update v0.9 which should probably refer to the new authentication mechanism on top of the old one. However our Makefile is not made to update v0.9 and there has been some drift.

Moving this PR to draft until we sort this out.

@adk-swisstopo
Copy link
Member Author

This only updates v1, which should probably not refer to the old authentication mechanism. It does not update v0.9 which should probably refer to the new authentication mechanism on top of the old one. However our Makefile is not made to update v0.9 and there has been some drift.

Moving this PR to draft until we sort this out.

As per discussion, we only need to update v1 documentation.

@adk-swisstopo adk-swisstopo marked this pull request as ready for review January 27, 2025 12:51
Copy link
Contributor

@boecklic boecklic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👌 very clear explanation

This also improves the existing documentation:
* explain what session authentication is for;
* point to relevant RFC for Basic authentication;
* be more explicit about the old Token authentication;
* add link from /get-token description to the Authentication section.
The [GitGuardian Bearer token detector](https://docs.gitguardian.com/secrets-detection/secrets-detection-engine/detectors/generics/bearer_token)
does not like it when we add a realistic-looking token. The documentation
shows a few ways to make it ignore that token. In this change we use the
dummy "123456" value.

The previous token was a more realistic dummy but a dummy nonetheless. It has
never been a valid token and could not be used to access anything.
This also removes documentation for the /get-token endpoint as it is only
relevant for the old Token authentication method.

The old authentication methods (Basic and Token) are only supported for v0.9.
We do not update the v0.9 spec via the Makefile any more.
Copy link
Contributor

@benschs benschs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cool

@adk-swisstopo adk-swisstopo merged commit b900b2f into develop Jan 28, 2025
3 checks passed
@adk-swisstopo adk-swisstopo deleted the feat-PB-1282-authdoc branch January 28, 2025 07:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants