Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove authorized builds from JWT #595

Open
breadchris opened this issue May 6, 2022 · 0 comments
Open

Remove authorized builds from JWT #595

breadchris opened this issue May 6, 2022 · 0 comments

Comments

@breadchris
Copy link
Contributor

We are currently putting all authorized builds into the jwt that gets sent back to the backend https://github.com/lunasec-io/lunasec/blob/master/lunatrace/bsl/backend/src/express-routes/auth-routes.ts#L85.

Parsing the builds from the JWT should be replaced with a call to collect the build ids when they are needed. https://github.com/lunasec-io/lunasec/blob/master/lunatrace/bsl/backend/src/graphql-yoga/resolvers/presign-sbom-upload.ts#L37

@breadchris breadchris moved this to 🆕 New in LunaTrace Planning Dec 1, 2022
@breadchris breadchris moved this from 🆕 New to 📋 Backlog in LunaTrace Planning Dec 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: 📋 Backlog
Development

When branches are created from issues, their pull requests are automatically linked.

1 participant