7 Commits

Author	SHA1	Message	Date
ManyTheFish	7ca647f0d0	feat(auth): Implement Tenant token ... Make meilisearch support JWT authentication signed with meilisearch API keys using HS256, HS384 or HS512 algorithms. Related spec: https://github.com/meilisearch/specifications/pull/89 Fix #1991	2022-01-27 08:25:39 +01:00
ManyTheFish	2b766a2f26	meta(auth): Enhance tests on authorization ... Enhance auth tests in order to be able to add new action without changing tests	2022-01-24 15:35:39 +01:00
bors[bot]	5d48f72ade	Merge #2065 ... 2065: MeiliSearch v0.25.0: `stable` -> `main` r=curquiza a=curquiza Co-authored-by: Clémentine Urquizar <clementine@meilisearch.com> Co-authored-by: Clément Renault <clement@meilisearch.com> Co-authored-by: bors[bot] <26634292+bors[bot]@users.noreply.github.com> Co-authored-by: many <maxime@meilisearch.com> Co-authored-by: Marin Postma <postma.marin@protonmail.com> Co-authored-by: Maxime Legendre <maximelegendre@MacBook-Pro-de-Maxime.local> Co-authored-by: Maxime Legendre <maximelegendre@mbp-de-maxime.home> Co-authored-by: Tamo <tamo@meilisearch.com> Co-authored-by: ManyTheFish <many@meilisearch.com>	2022-01-11 16:30:22 +00:00
Tamo	d7df4d6b84	test: Ignore the auths tests on windows ... Since the auths tests fail sporadically on the windows CI but we can't reproduce these failures with a real windows machine we are going to ignore theses one. But we still ensure they compile.	2021-12-22 12:39:48 +01:00
Maxime Legendre	a845cd8880	Fix(auth): Forbid index creation on alternates routes ... Forbid index creation on alternates routes when the action `index.create` is not given fix #2024	2021-12-20 14:48:18 +01:00
many	ee7970f603	feat(auth): Extend API keys ... - Add API keys in snapshots - Add API keys in dumps - Rename action indexes.add to indexes.create - fix QA #1979 fix #1979 fix #1995 fix #2001 fix #2003 related to #1890	2021-12-14 17:33:39 +01:00
many	ffefd0caf2	feat(auth): API keys ... implements: https://github.com/meilisearch/specifications/blob/develop/text/0085-api-keys.md - Add tests on API keys management route (meilisearch-http/tests/auth/api_keys.rs) - Add tests checking authorizations on each meilisearch routes (meilisearch-http/tests/auth/authorization.rs) - Implement API keys management routes (meilisearch-http/src/routes/api_key.rs) - Create module to manage API keys and authorizations (meilisearch-auth) - Reimplement GuardedData to extend authorizations (meilisearch-http/src/extractors/authentication/mod.rs) - Change X-MEILI-API-KEY by Authorization Bearer (meilisearch-http/src/extractors/authentication/mod.rs) - Change meilisearch routes to fit to the new authorization feature (meilisearch-http/src/routes/) - close #1867	2021-12-06 09:52:41 +01:00