jscas-server icon indicating copy to clipboard operation
jscas-server copied to clipboard

Is there a way to fitler the servers that can obtain credentials from jscas-server?

Open leaf-node opened this issue 7 years ago • 1 comments

I suspect that https://github.com/jscas/jscas-server/blob/master/lib/plugins/jsServiceRegistry/index.js might have to do with it, but I'm not sure.

What I'm looking to do is to filter clients based on a set of IP address ranges. We tend to add and remove servers with CAS clients on a regular basis, so an IP range fitler would make the most sense for that use case. Is this supported by jscas-server as is?

Thanks! : D

leaf-node avatar Jun 06 '18 21:06 leaf-node

You have a couple options. The easiest would be to filter the requests at your proxy server, e.g. HAProxy. But typically a CAS server filters access by service URL. In that case, the production ready https://github.com/jscas/jscas-pg-registries will suit your needs. However, if you need a registry that supports limiting queries by IP address, you will need to write your own registry plugin.

The plugins included in the base install, i.e. npm install jscas-server, are not meant for production use. This is very clearly stated in the readme.

jsumners avatar Jun 07 '18 01:06 jsumners