featurebase/server
reesporte cf2410fea6 addresses multiple authn/z tickets
* fb-998 - authn/z enabled in handlers (kitchen-sink ticket)
    - authorization is enabled through the use of a bearer token (using header "Authorization")
    - authorization may occur through the use of an "Authorization" header or "molecula-chip" cookie
    - ui is updated for changes to handler
* fb-1131 - protect grpc endpoints
    - GRPC endpoints now check authorization if auth is enabled
* fb-1129 - inter-node communication
    - the following endpoints use the secretKey for authentication:
        - /internal/cluster/message: POST
        - /internal/translate/data: GET, POST

* added test to api_test.go (TestAuth_MultiNode) testing various auth/permissions stuff on a multi-node cluster

not included:
    - fb-1130 - filter response of endpoints
    - fb-1109 - improved audit logging

@jaffee [are you not entertained](https://www.youtube.com/watch?v=mutgotxrcqg)

Co-authored-by: souhailanoor <90720110+souhailanoor@users.noreply.github.com>
Co-authored-by: tgruben <tgruben@gmail.com>
Co-authored-by: 54mir <48686912+54mir@users.noreply.github.com>
Co-authored-by: kcrodgers24 <49999391+kcrodgers24@users.noreply.github.com>
2022-01-14 12:31:32 -06:00
..
testdata/certs Supply "subject alternative name" for TLS certificates 2020-10-20 14:14:26 -05:00
cluster_test.go add copyright notice back in 2021-12-10 11:01:04 -06:00
config.go addresses multiple authn/z tickets 2022-01-14 12:31:32 -06:00
config_internal_test.go addresses multiple authn/z tickets 2022-01-14 12:31:32 -06:00
config_test.go add copyright notice back in 2021-12-10 11:01:04 -06:00
dup.go add copyright notice back in 2021-12-10 11:01:04 -06:00
dup_arm64.go add copyright notice back in 2021-12-10 11:01:04 -06:00
grpc.go addresses multiple authn/z tickets 2022-01-14 12:31:32 -06:00
grpc_test.go addresses multiple authn/z tickets 2022-01-14 12:31:32 -06:00
handler_test.go Commented out a failing test as a meta-test 2022-01-03 19:17:11 -08:00
pg.go add copyright notice back in 2021-12-10 11:01:04 -06:00
pg_internal_test.go add copyright notice back in 2021-12-10 11:01:04 -06:00
pg_test.go add copyright notice back in 2021-12-10 11:01:04 -06:00
server.go addresses multiple authn/z tickets 2022-01-14 12:31:32 -06:00
server_internal_test.go addresses multiple authn/z tickets 2022-01-14 12:31:32 -06:00
server_test.go Stop blocking API called when cluster is DOWN or DEGRADED 2021-12-28 13:52:04 -06:00
sql.go add copyright notice back in 2021-12-10 11:01:04 -06:00
tlsconfig.go add copyright notice back in 2021-12-10 11:01:04 -06:00
trial.go add copyright notice back in 2021-12-10 11:01:04 -06:00