You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openwhisk.apache.org by dg...@apache.org on 2019/06/30 10:32:49 UTC
[incubator-openwhisk] branch master updated (235162e -> 44ae87e)
This is an automated email from the ASF dual-hosted git repository.
dgrove pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-openwhisk.git.
from 235162e Fix the install task for standalone by making it depend on bootJar (#4528)
new bfad4b1 Ignore route management artifacts from deployment.
new 162a460 Fix var->val.
new 44ae87e Correct documentation relating to web action authentication.
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.gitignore | 11 +++++++++++
.../org/apache/openwhisk/core/controller/WebActions.scala | 2 +-
core/routemgmt/createApi/package.json | 2 +-
core/routemgmt/deleteApi/package.json | 2 +-
core/routemgmt/getApi/package.json | 2 +-
docs/webactions.md | 2 +-
6 files changed, 16 insertions(+), 5 deletions(-)
[incubator-openwhisk] 02/03: Fix var->val.
Posted by dg...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
dgrove pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-openwhisk.git
commit 162a4608fa6280bb275136e1af9a9c08bd96023a
Author: Rodric Rabbah <ro...@gmail.com>
AuthorDate: Thu Jun 27 00:35:14 2019 -0400
Fix var->val.
---
.../main/scala/org/apache/openwhisk/core/controller/WebActions.scala | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/core/controller/src/main/scala/org/apache/openwhisk/core/controller/WebActions.scala b/core/controller/src/main/scala/org/apache/openwhisk/core/controller/WebActions.scala
index c785f09..d910442 100644
--- a/core/controller/src/main/scala/org/apache/openwhisk/core/controller/WebActions.scala
+++ b/core/controller/src/main/scala/org/apache/openwhisk/core/controller/WebActions.scala
@@ -483,7 +483,7 @@ trait WhiskWebActionsApi
provide(fullyQualifiedActionName(actionName)) { fullActionName =>
onComplete(verifyWebAction(fullActionName, onBehalfOf.isDefined)) {
case Success((actionOwnerIdentity, action)) =>
- var requiredAuthOk =
+ val requiredAuthOk =
requiredWhiskAuthSuccessful(action.annotations, context.headers).getOrElse(true)
if (!requiredAuthOk) {
logging.debug(
[incubator-openwhisk] 01/03: Ignore route management artifacts from
deployment.
Posted by dg...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
dgrove pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-openwhisk.git
commit bfad4b17fd39197b9eb2b1d927509004d3ce5d67
Author: Rodric Rabbah <ro...@gmail.com>
AuthorDate: Wed Jun 26 19:57:04 2019 -0400
Ignore route management artifacts from deployment.
---
.gitignore | 11 +++++++++++
core/routemgmt/createApi/package.json | 2 +-
core/routemgmt/deleteApi/package.json | 2 +-
core/routemgmt/getApi/package.json | 2 +-
4 files changed, 14 insertions(+), 3 deletions(-)
diff --git a/.gitignore b/.gitignore
index e4cc77d..ae5e525 100644
--- a/.gitignore
+++ b/.gitignore
@@ -86,3 +86,14 @@ intellij-run-config.groovy
# VSCode
.vscode/
+
+# route management
+core/routemgmt/createApi/apigw-utils.js
+core/routemgmt/createApi/package-lock.json
+core/routemgmt/createApi/utils.js
+core/routemgmt/deleteApi/apigw-utils.js
+core/routemgmt/deleteApi/package-lock.json
+core/routemgmt/deleteApi/utils.js
+core/routemgmt/getApi/apigw-utils.js
+core/routemgmt/getApi/package-lock.json
+core/routemgmt/getApi/utils.js
diff --git a/core/routemgmt/createApi/package.json b/core/routemgmt/createApi/package.json
index ccc7f6b..173809e 100644
--- a/core/routemgmt/createApi/package.json
+++ b/core/routemgmt/createApi/package.json
@@ -1,6 +1,6 @@
{
"main": "createApi.js",
- "dependencies" : {
+ "dependencies": {
"lodash": "4.17.11",
"request": "2.88.0"
}
diff --git a/core/routemgmt/deleteApi/package.json b/core/routemgmt/deleteApi/package.json
index c71703a..b3d2d9d 100644
--- a/core/routemgmt/deleteApi/package.json
+++ b/core/routemgmt/deleteApi/package.json
@@ -1,6 +1,6 @@
{
"main": "deleteApi.js",
- "dependencies" : {
+ "dependencies": {
"lodash": "4.17.11",
"request": "2.88.0"
}
diff --git a/core/routemgmt/getApi/package.json b/core/routemgmt/getApi/package.json
index 521c1b1..fdad1c7 100644
--- a/core/routemgmt/getApi/package.json
+++ b/core/routemgmt/getApi/package.json
@@ -1,6 +1,6 @@
{
"main": "getApi.js",
- "dependencies" : {
+ "dependencies": {
"lodash": "4.17.11",
"request": "2.88.0"
}
[incubator-openwhisk] 03/03: Correct documentation relating to web
action authentication.
Posted by dg...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
dgrove pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-openwhisk.git
commit 44ae87ea74286e08284c70a82f040cea04fa3608
Author: Rodric Rabbah <ro...@gmail.com>
AuthorDate: Thu Jun 27 00:35:40 2019 -0400
Correct documentation relating to web action authentication.
---
docs/webactions.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/webactions.md b/docs/webactions.md
index ba62efd..7cf74c1 100644
--- a/docs/webactions.md
+++ b/docs/webactions.md
@@ -301,7 +301,7 @@ The result of these changes is that the `name` is bound to `Jane` and may not be
## Securing web actions
-By default, a web action can be invoked by anyone having the web action's invocation URL. Use the `require-whisk-auth` [web action annotation](annotations.md#annotations-specific-to-web-actions) to secure the web action. When the `require-whisk-auth` annotation is set to `true`, the action will authenticate the invocation request's Basic Authorization credentials against the action owner's whisk auth key. When set to a number or a case-sensitive string, the action's invocation request m [...]
+By default, a web action can be invoked by anyone having the web action's invocation URL. Use the `require-whisk-auth` [web action annotation](annotations.md#annotations-specific-to-web-actions) to secure the web action. When the `require-whisk-auth` annotation is set to `true`, the action will authenticate the invocation request's Basic Authorization credentials to confirm they represent a valid OpenWhisk identity. When set to a number or a case-sensitive string, the action's invocatio [...]
Alternatively, use the `--web-secure` flag to automatically set the `require-whisk-auth` annotation. When set to `true` a random number is generated as the `require-whisk-auth` annotation value. When set to `false` the `require-whisk-auth` annotation is removed. When set to any other value, that value is used as the `require-whisk-auth` annotation value.