Skip to content

Use custom uhd auth header for jwt#879

Merged
mattjreynolds merged 1 commit intomainfrom
task/CDD-3145-use-custom-uhd-auth-header-for-jwt
Mar 24, 2026
Merged

Use custom uhd auth header for jwt#879
mattjreynolds merged 1 commit intomainfrom
task/CDD-3145-use-custom-uhd-auth-header-for-jwt

Conversation

@mattjreynolds
Copy link
Copy Markdown
Contributor

@mattjreynolds mattjreynolds commented Mar 23, 2026

Use X-UHD-AUTH header for the JWT instead of Authorization header

  • The Authorzation header is already being used for the API key which is checked by the AWS load balancer, so commands with just the JWT are rejected.
  • Sending both headers means the ALB can verify the API key and send the request on to Django which can then verify the JWT

Can be merged ahead of the API PR

@mattjreynolds mattjreynolds requested a review from a team as a code owner March 23, 2026 09:59
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 23, 2026

Unit tests coverage

Lines Statements Branches Functions
Coverage: 96%
94.82% (4101/4325) 84.45% (1233/1460) 95.21% (736/773)
Tests Skipped Failures Errors Time
1565 0 💤 0 ❌ 0 🔥 28.413s ⏱️

Copy link
Copy Markdown
Contributor

@manubinary manubinary left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me

Use `X-UHD-AUTH` header for the JWT instead of `Authorization` header
- The Authorzation header is already being used for the API key which is
  checked by the AWS load balancer, so commands with just the JWT are
  rejected.
- Sending both headers means the ALB can verify the API key and send the
  request on to Django which can then verify the JWT
@mattjreynolds mattjreynolds force-pushed the task/CDD-3145-use-custom-uhd-auth-header-for-jwt branch from b4fd396 to f9ef4a4 Compare March 24, 2026 00:11
@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
B Maintainability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

@mattjreynolds mattjreynolds merged commit e3c695e into main Mar 24, 2026
15 of 16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants