Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

FI-3018: Allow multi-line custom headers in token introspection request #77

Merged
merged 6 commits into from
Oct 10, 2024

Conversation

emichaud998
Copy link
Contributor

@emichaud998 emichaud998 commented Sep 20, 2024

Summary

Updated the custom_authorization_header input to parse out more than one line of input. Changed input to custom_token introspection_request_header instead of custom_authorization_header and updated the description of the input to be generic instead of specific to the authorization header.

Testing Guidance

Run the test kit locally and ensure including headers as input in this format:

<Header 1 Name>: <Value 1>
<Header 2 Name>: <Value 2>

Works as expected.

Ex: 'Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW'
Create an array of header name and value strings.
Ex:
[
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I really don't like that the tester has to create a JSON array when I imagine the most common use case is a single header. I think I would probably prefer them to just be newline delimited just like they are in an actual HTTP request.

description: 'The complete URL of the token introspection endpoint.'

input :custom_authorization_header,
title: 'HTTP Authorization Header for Introspection Request',
input :custom_token_introspection_request_headers,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We don't want to change this id because that would be a breaking change.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I also created a PR to update the id of this input in the (g)(10) test kit, but if there are multiple places that this is used and it's better just not to change this id, I will change back the id name and delete the (g)(10) pull request. Would you prefer that?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, I would prefer not to change this id.

Ex: 'Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW'
Add custom headers for the introspection request by adding each header's name and value with a new line
between each header.
Ex:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This does not appear how you want it to in the UI.

@emichaud998 emichaud998 merged commit 621866b into main Oct 10, 2024
2 checks passed
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants