Skip to content

HTTP Basic Auth & RBAC Authorization - #37

Merged
szeka9 merged 5 commits into
mainfrom
development
Jul 25, 2026
Merged

HTTP Basic Auth & RBAC Authorization#37
szeka9 merged 5 commits into
mainfrom
development

Conversation

@szeka9

@szeka9 szeka9 commented Jul 23, 2026

Copy link
Copy Markdown
Owner

No description provided.

szeka9 added 5 commits July 23, 2026 23:59
Add authentication and authorization module
as an extension of the HTTP state machine.

Add authorization capability based on stored
user data and role definitions. Role definitions
allow glob-based pattern matching with
additive role-based acccess control (RBAC).

Introduce additional configuration parameter
to select the authentication method.
Test resource policy selection, protocol correctness
and prefix-tree abstraction for authorization.
Add simple test cases for HTTP basic auth for positive cases.

Refactor duplicate helper functions and move them to a common
module, imported by test modules.

Add missing content-length value to HTTP requests sent during
the tests.
…rmalization

Make passwd and roles files configurable to improve usability
and to simply unit testing.

Additionally, this change fixes bugs in the configuration module:
- normalize default file path values
- only read configuration from file if the configuration is not loaded;
do not re-read configuration if a value is None
@szeka9
szeka9 merged commit 3a77c69 into main Jul 25, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant