bx509d: Add /get-tgts batch end-point

Browse Source

In order to support batch jobs systems that run many users' jobs and
which jobs need credentials, we add a /get-tgts end-point that is a
batched version of the /get-tgt end-point.  This end-point returns JSON.

Also, we make GETs optional, default to not-allowed in preference of
POSTs.

We also correct handling of POST (before POSTs with non-zero-length bodies
would cause the server to close the connection), and add additional CSRF
protection features, including the ability to disable all GET requests
for /get-keys and /get-config.

...

This commit is contained in:

Nicolas Williams

2022-08-10 18:08:03 -05:00

parent 323f4631a4

commit ae527bf97c

4 changed files with 1414 additions and 160 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1031

kdc/bx509d.c

File diff suppressed because it is too large Load Diff