]> git.apps.os.sepia.ceph.com Git - ceph-ci.git/commit
mgr/dashboard: Simplify authentication protocol
authorDaniel Persson <mailto.woden@gmail.com>
Wed, 29 Nov 2023 09:39:51 +0000 (09:39 +0000)
committerMatthew Vernon <mvernon@wikimedia.org>
Thu, 22 Feb 2024 09:15:16 +0000 (09:15 +0000)
commitfcbd8fdae9d80d9a9bd61838aeaf41b504a5888a
tree5ebeb1dd09091dcb9232384a5c0eabe78d278efb
parent8ad6275ec26e1bf05ebbd54dea35769e2153dfce
mgr/dashboard: Simplify authentication protocol
By removing the dependency to PyJWT we also remove the dependency to the cryptographic library which
in the dashboard module will create a crash. In newer implementations of the library PyO3 is used to run
rust code in order to encrypt with Elliptic Curves. This is never used in the dashboard communication so
a much simpler implementation where we only use the hmac sha256 algorithm to create the signed JWT message
could be used.

Fixes: https://forum.proxmox.com/threads/ceph-warning-post-upgrade-to-v8.129371
Signed-off-by: Daniel Persson <mailto.woden@gmail.com>
(cherry picked from commit c616a9d017b5fcc85bb5c1556bccf4c77cc3899e)
src/pybind/mgr/dashboard/constraints.txt
src/pybind/mgr/dashboard/exceptions.py
src/pybind/mgr/dashboard/requirements.txt
src/pybind/mgr/dashboard/services/auth.py
src/pybind/mgr/dashboard/tox.ini