Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions authenticator/middleware/sessionmanager.go
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,8 @@ const (
// ApiTokenClaimIssuer is the issuer who generated api-token for APIs
ApiTokenClaimIssuer = "apiTokenIssuer"

LicenseManagerClaimIssuer = "licenseManagerIssuer"

// invalidLoginError, for security purposes, doesn't say whether the username or password was invalid. This does not mitigate the potential for timing attacks to determine which is which.
invalidLoginError = "Invalid username or password"
blankPasswordError = "Blank passwords are not allowed"
Expand Down Expand Up @@ -221,6 +223,8 @@ func (mgr *SessionManager) VerifyToken(tokenString string) (jwt.Claims, error) {
return mgr.Parse(tokenString)
case ApiTokenClaimIssuer:
return mgr.ParseApiToken(tokenString)
case LicenseManagerClaimIssuer:
return mgr.ParseApiToken(tokenString)
default:
// IDP signed token
prov, err := mgr.provider()
Expand Down