-
Notifications
You must be signed in to change notification settings - Fork 142
feat: JWT apiAuthentication
UI integration
#1096
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1096 +/- ##
==========================================
+ Coverage 77.40% 77.42% +0.02%
==========================================
Files 56 56
Lines 2288 2286 -2
Branches 258 258
==========================================
- Hits 1771 1770 -1
+ Misses 487 486 -1
Partials 30 30 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
@jescalada - thanks for the PR ❤️ Perhaps it makes sense to display the error message outside of the table in a pop-up? Open until closed by the user? |
I've tried to find better-looking error displays (such as custom-styled Snackbars, and other components), but it seems MUI v4 doesn't support some of the best ones. In later versions of MUI we can use these Alert components or combine them with Snackbars to make it look better. There's this issue for upgrading MUI to v5 #1023 which I'll take a look at soon. It might be worth modernizing the frontend a bit once the dependency upgrades are done. (Note: Upgrading directly to v7 is not possible as each new major version introduces various breaking changes - plus the automatic migration tools only go up one major version at a time) |
…-proxy into JWT-UI-integration
Fixes #1091.
This PR adds a Settings page that allows configuring the JWT token to authenticate UI requests to the API:
Previously, requests were bypassing the JWT check if they came from an authenticated user, and being completely blocked when not logged in.
This PR also improves the error messages shown when JWT authentication fails:
Missing token
Bad JWT format
Expired JWT