Skip to content
This repository has been archived by the owner on Jul 26, 2022. It is now read-only.

Replace mem data store with file data store #15

Closed
wants to merge 1 commit into from
Closed

Replace mem data store with file data store #15

wants to merge 1 commit into from

Conversation

JanekLehr
Copy link

Fixes #14

Use a file-based data store to enable persisting the credential store beyond server restarts.

The in-memory store has been replaced completely because it is causes this bug. In fact, the file-based store behaves the same way as the in-mem if run in a container without a volume attached to persist the store. However, if a persistent volume is used then auth tokens continue to work after restart and before a fresh oauth flow.

@pires
Copy link
Contributor

pires commented Feb 27, 2019

I'm sorry for the delay but I've been busy with completely unrelated work.

Now, thank you for putting the effort into this. However, this is not a new idea to me and I actually put the work before but didn't push because I concluded it was a bad idea to store such sensitive information. Let's look at #14 first and then come back at this.

@JanekLehr
Copy link
Author

@pires Ah, I understand your security concern. How do you deal with this issue then, especially for CLI tools that pull from Nexus during local dev workflows or CI/CD automation? Do you have to make sure everyone logs in via the browser each time a new Pod launches?

Use a file-based data store to enable persisting the credential
store beyond server restarts.
@JanekLehr
Copy link
Author

Hi @pires. This is a ping for my previous comment. Do you have the problem I mentioned in my earlier comment? How do you address it?

@pires
Copy link
Contributor

pires commented Jul 10, 2020

Sorry once again but I'm no longer involved with this effort. @arochaf @FlavioF can you help?

This pull request was closed.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CLI credentials' JWT returns 403 after server restart and before OAuth flow triggered
2 participants