Michal KleczekandGitHub
77ff11de95
Changes: 1. Refactoring and some cleanup of JWT handling code: * Instead of caching AuthResult cache decoded claims (which signature was verified). Validating claims and determining role is done after cache lookup * Cleaned up API so that usage of it is simplified: lookupJwtCache cache key >>= parseClaims configJwtAud time * Handling of JwtCacheState initialization and updates of configuration is encapsulated in Auth.JwtCache module 2. Generic high performance (hopefully) scalable, dynamically resizeable cache implementation based on stm, stm-hamt and sieve algorithm. It also integrates with PostgREST measurements infrastructure providing usage stats (ie. hit ratio, evictions count)
41 lines
1.0 KiB
Plaintext
41 lines
1.0 KiB
Plaintext
db-aggregates-enabled = false
|
|
db-anon-role = ""
|
|
db-channel = "pgrst"
|
|
db-channel-enabled = true
|
|
db-extra-search-path = "public"
|
|
db-hoisted-tx-settings = "statement_timeout,plan_filter.statement_cost_limit,default_transaction_isolation"
|
|
db-max-rows = ""
|
|
db-plan-enabled = false
|
|
db-pool = 10
|
|
db-pool-acquisition-timeout = 10
|
|
db-pool-max-lifetime = 1800
|
|
db-pool-max-idletime = 30
|
|
db-pool-automatic-recovery = true
|
|
db-pre-request = ""
|
|
db-prepared-statements = false
|
|
db-root-spec = ""
|
|
db-schemas = "public"
|
|
db-config = true
|
|
db-pre-config = ""
|
|
db-tx-end = "commit"
|
|
db-uri = "postgresql://"
|
|
jwt-aud = ""
|
|
jwt-role-claim-key = ".\"role\""
|
|
jwt-secret = ""
|
|
jwt-secret-is-base64 = true
|
|
jwt-cache-max-entries = 1000
|
|
log-level = "error"
|
|
log-query = "disabled"
|
|
openapi-mode = "follow-privileges"
|
|
openapi-security-active = false
|
|
openapi-server-proxy-uri = ""
|
|
server-cors-allowed-origins = ""
|
|
server-host = "!4"
|
|
server-port = 3000
|
|
server-trace-header = ""
|
|
server-timing-enabled = false
|
|
server-unix-socket = ""
|
|
server-unix-socket-mode = "660"
|
|
admin-server-host = "!4"
|
|
admin-server-port = ""
|