Skip to content

Commit 9a2cbdc

Browse files
committed
Add release notes about enabled support of WLCG Bearer token in Davix
1 parent 73b3b77 commit 9a2cbdc

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

README/ReleaseNotes/v624/index.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -132,6 +132,12 @@ provide access to the widgets via websocket connection - any other kind of reque
132132
or exe.json will be refused completely. Cobined with connection tokens and https protocol,
133133
this makes usage of webgui components in public networks more secure.
134134
135+
### Enabled WLCG Bearer Tokens support in RDavix
136+
Bearer tokens are part of WLCG capability-based infrastructure with capability-based scheme which uses an infrastructure that describes what the bearer is allowed to do as opposed to who that bearer is. Token discovery procedure are developed according WLCG Bearer Token Discovery specification document (https://github.com/WLCG-AuthZ-WG/bearer-token-discovery/blob/master/specification.md). Short overview:
137+
1. If the `BEARER_TOKEN` environment variable is set, then the value is taken to be the token contents.
138+
2. If the `BEARER_TOKEN_FILE` environment variable is set, then its value is interpreted as a filename. The contents of the specified file are taken to be the token contents.
139+
3. If the `XDG_RUNTIME_DIR` environment variable is set, then take the token from the contents of `$XDG_RUNTIME_DIR/bt_u$ID`(this additional location is intended to provide improved security for shared login environments as `$XDG_RUNTIME_DIR` is defined to be user-specific as opposed to a system-wide directory.).
140+
4. Otherwise, take the token from `/tmp/bt_u$ID`.
135141
136142
## GUI Libraries
137143

0 commit comments

Comments
 (0)