12 Commits

Author	SHA1	Message	Date
Max Erenberg	0a52b0b395	add unit tests	2021-11-27 14:58:01 -05:00
Max Erenberg	bb56870652	add skeleton for TUI	2021-09-04 23:05:19 +00:00
Max Erenberg	7d23fd690f	store GSSAPI token in flask.g	2021-08-28 05:51:48 +00:00
Max Erenberg	e011e98026	use GSSAPI delegation	2021-08-26 02:19:18 +00:00
Max Erenberg	08a3faaefc	add unit tests for members CLI	2021-08-23 23:01:24 +00:00
Max Erenberg	6917247fdd	add members CLI	2021-08-23 13:59:01 +00:00
Max Erenberg	95d083fca1	use our own SPNEGO implementation	2021-08-21 06:27:33 +00:00
Max Erenberg	583fcded9b	add test for API request without KRB-CRED	2021-08-19 23:53:13 +00:00
Max Erenberg	490abb302c	add simple authz tests	2021-08-19 20:33:44 +00:00
Max Erenberg	cc0bc4a638	add tests for Mailman API	2021-08-19 16:14:41 +00:00
Max Erenberg	d78d31eec0	add Kerberos delegation (#5) ... This PR adds unconstrained Kerberos delegation to the API. The client obtains a forwarded TGT and sends it, base64-encoded, in an HTTP header named 'X-KRB5-CRED'. The server reads this credential, creates a new credentials cache for the user, and stores the credential into the new cache. The server can now authenticate to other services (e.g. LDAP) over GSSAPI using the forwarded client's credentials. Reviewed-on: #5 Co-authored-by: Max Erenberg <merenber@localhost> Co-committed-by: Max Erenberg <merenber@localhost>	2021-08-18 15:39:14 -04:00
Max Erenberg	6cdb41d47b	move all tests to top-level folder	2021-08-14 00:11:56 +00:00