-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
False
-
-
False
-
-
The ros-ocp-backend currently supports OAuth 2.0 authentication through Kubernetes TokenReview API but lacks automatic token refresh capabilities. When tokens expire, clients receive 401 Unauthorized responses and must handle token renewal themselves.
We need to investigate what changes are required to implement proper token refresh handling.
The current implementation validates each request independently using Kubernetes TokenReview API and can detect expired tokens through error handling but doesn't provide any refresh mechanism.
- is cloned by
-
FLPATH-2848 [spike]: Investigate how to migrate the current auth design with envoy sidecars for each component to a single API Gateway
-
- In Progress
-
-
FLPATH-2838 Use Authorino dedicated instance to remove dependency with Authorino Operator
-
- ON_QA
-