8 commits

Author	SHA1	Message	Date
Juliusz Chroboczek	de3a016f4d	Set the username in the server when using tokens. ... This avoids the need to pass the username in the URL without requiring the client to parse tokens.	2022-02-20 15:33:11 +01:00
Juliusz Chroboczek	c4d46d20aa	Add the galene-link utility.	2022-02-20 01:16:26 +01:00
Juliusz Chroboczek	37ef768ac0	Fix token parsing when aud is an array.	2022-02-20 01:05:21 +01:00
Juliusz Chroboczek	a86fb08f6c	Replace ClientPermissions with a list of strings. ... Now that we support external auth, the permissions list is open-ended. Make it a list for simplicity.	2022-02-19 23:44:57 +01:00
Juliusz Chroboczek	1d583e5367	Don't verify token issuer. ... This makes it possible to use token authentication without an authentication server.	2022-02-18 19:21:02 +01:00
Juliusz Chroboczek	7784a2ac96	Add more tests for token auth.	2022-02-18 16:08:44 +01:00
Juliusz Chroboczek	947eb71328	Used named errors in token code.	2022-02-18 15:59:59 +01:00
Juliusz Chroboczek	03811db37d	Implement token authentication.	2022-02-18 13:35:17 +01:00