guard
guard copied to clipboard
WIP - Add nonce validation in PoP token verifier
Making sure nonce claim is not been re-used more than once on each requests.
- Validating if nonce claim is present as string
- Saving each
nonceclaim value into a map (cache) - Validating that each requests is having a difference
nonceclaims by checking the values in the cache. - Refactoring big cache library to be used on authn and authz side
- Cleaning the cache after TTL pop token expiration + 1minutes by spawning a go routine for each calls
@julienstroheker is this PR still open?
Yes. I was waiting the UT refactor pr to merge first.
Still holding this PR due to changes we do on RBAC. This requires more tests + to review PR comments.