Andreas Herrmann 199c52fd79 Don't always redirect to /login automatically (#8532) ... * Don't always redirect to /login automatically The redirect mode can be configured to never redirect, always redirect, or redirect based on the request type (redirect for text/html). In case of no redirect the auth middleware client will reply with 401 Unauthorized with a custom WWW-Authenticate challenge to login on the auth middleware. * Make login to redirect configurable on trigger service By default the trigger service will redirect for HTML requests and not redirect for JSON requests. The test suite uses automatic redirect as the OAuth2 test server works without user interaction. changelog_begin changelog_end * Preserve path and query in authMiddlewareUri This is necessary if the auth middleware lies behind a reverse proxy with a path prefix or a similar setup. * Bump default auth middleware login timeout One minute was to short for a login cycle that requires manual user input. * Set token cookie properties `path = "/"` is required so that the `/login` endpoint can reliably override the cookie value for other endoints such as `/cb` or `/v1/triggers`. * Test redirectToLogin modes * Redirect on HTML https://github.com/digital-asset/daml/pull/8532#discussion_r559368335 * Use pass/reject in onRedirectToLogin 8db2bff9af (r559370308) * default login timeout 5min https://github.com/digital-asset/daml/pull/8532#discussion_r559535511 Co-authored-by: Andreas Herrmann <andreas.herrmann@tweag.io>		2021-01-18 14:03:39 +00:00
..
daml	Remove redundant list of LF versions (#8490)	2021-01-13 13:21:39 +00:00
runner	Upgrade scalafmt and enable trailing commas (#8437)	2021-01-09 11:37:37 +01:00
service	Don't always redirect to /login automatically (#8532)	2021-01-18 14:03:39 +00:00
tests	Upgrade scalafmt and enable trailing commas (#8437)	2021-01-09 11:37:37 +01:00