Implement token and basic authentication

NOTE: this Service is not resilient against brute-force attacks in such it does not implement rate limiting on authentication nor authorization requests. * Uses Linux users to authorize requests. * no authorization roles or scopes are implemented yet. * token based authentication is implemented with the Redfish session login authentication in mind. That is, when we would implement Redfish it should be easy to append the current implementation * token timeout gets reset on every use of the token. * basic authentication: The authentication service expects a 'Authorization' header containing the following format: 'Basic <base64 encoded as <username:password>>'
turing-machines · Sep 27, 2023 · e699d6d · e699d6d
1 parent 23fab75
commit e699d6d
Show file tree

Hide file tree

Showing 9 changed files with 823 additions and 48 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/bmcd/Cargo.toml b/bmcd/Cargo.toml
@@ -15,6 +15,9 @@ serde_yaml = "0.9.25"
 tpi_rs = { path = "../tpi_rs" }
 clap = { version = "4.4.2", features = ["cargo"] }
 openssl = "0.10.57"
+rand = "0.8.5"
+pwhash = "1.0.0"
+base64 = "0.21.4"
 
 anyhow.workspace = true
 log.workspace = true
@@ -23,4 +26,3 @@ tokio.workspace = true
 tokio-util.workspace = true
 futures.workspace = true
 serde.workspace = true
-rand = "0.8.5"