smart_proxy_dynflow 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d83b16dc061524ea6fd926d762b5c277ec04d67a343ee284fc07150288bc023
-  data.tar.gz: ebce0c873b7c456628669889581c4cddab8c534f81bdd4b60f36dd1de99bb9fe
+  metadata.gz: cd0dc07d76fb4d9c90a20b60527f12a3802fae93e7c4ab54d1485bd2f4fb401b
+  data.tar.gz: 9288464706db66ad870513a7ed75de6237517f805739e3cfa8071a98536471e9
 SHA512:
-  metadata.gz: 2f0fd0fb0fe9251accb11d7759bfd9ca1319325ac5244d5f17d53af9e887b29bbf45a95689d1cca47b218707a589d6b31e7d7b8b57bf3f92a7a7cfeb465aa2df
-  data.tar.gz: af76df1a492d8175052d8211955301390376941814c3780f70d9ade1fd9a1aaa82406f856012667d7c5dd0c9c1b08f6c90cb84c3468dcb50668c5b93e8f285c4
+  metadata.gz: a4e33c275e9b5d76185f3e09ca747364a499f63d020dabaab36ecd970237db41363c2226111cc7746acc42569c13a15057302dbb9e8e37a88c79ee432fd7560f
+  data.tar.gz: 10e3d672cd05f8254bccd99eb356a92d26846fd4c9c38df0378ed7454ced21b84bb2a52b31ead3135a8161745985b55c349a03ae084fd669e8ea7f88e9eeeb05

data/Gemfile

@@ -16,6 +16,8 @@ group :development do
 end
 
 group :test do
+  # multi_json passes positional parser options, which JSON 3 no longer accepts.
+  gem 'json', '< 3'
   gem 'minitest'
   gem 'mocha'
   gem 'public_suffix'

data/lib/smart_proxy_dynflow/core.rb

@@ -4,17 +4,10 @@ require 'fileutils'
 
 module Proxy::Dynflow
   class Core
-    attr_accessor :world, :accepted_cert_serial
+    attr_accessor :world
 
     def initialize
       @world = create_world
-      cert_file = Proxy::SETTINGS.foreman_ssl_cert || Proxy::SETTINGS.ssl_certificate
-      if cert_file
-        client_cert = File.read(cert_file)
-        # we trust only requests using the same certificate as we are
-        # (in other words the local proxy only)
-        @accepted_cert_serial = OpenSSL::X509::Certificate.new(client_cert).serial
-      end
     end
 
     def create_world(&block)
@@ -101,7 +94,7 @@ module Proxy::Dynflow
           include ::Sinatra::Authorization::Helpers
 
           before do
-            do_authorize_with_ssl_client if Settings.instance.console_auth
+            do_authorize_any if Settings.instance.console_auth
           end
 
           Core.ensure_initialized

data/lib/smart_proxy_dynflow/version.rb

@@ -2,6 +2,6 @@
 
 module Proxy
   module Dynflow
-    VERSION = '1.0.0'
+    VERSION = '1.0.1'
   end
 end

data/settings.d/dynflow.yml.example

@@ -2,7 +2,8 @@
 :enabled: true
 :database:
 
-# Require a valid cert to access Dynflow console
+# Require a client certificate trusted by the proxy and listed in the
+# proxy's :trusted_hosts setting to access the Dynflow console
 # :console_auth: true
 
 # Maximum age of execution plans to keep before having them cleaned

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: smart_proxy_dynflow
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Ivan Nečas
@@ -130,7 +130,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Dynflow runtime for Foreman smart proxy
 test_files: []