Michal KleczekandGitHub
77ff11de95
Changes: 1. Refactoring and some cleanup of JWT handling code: * Instead of caching AuthResult cache decoded claims (which signature was verified). Validating claims and determining role is done after cache lookup * Cleaned up API so that usage of it is simplified: lookupJwtCache cache key >>= parseClaims configJwtAud time * Handling of JwtCacheState initialization and updates of configuration is encapsulated in Auth.JwtCache module 2. Generic high performance (hopefully) scalable, dynamically resizeable cache implementation based on stm, stm-hamt and sieve algorithm. It also integrates with PostgREST measurements infrastructure providing usage stats (ie. hit ratio, evictions count)
43 lines
1.3 KiB
Plaintext
43 lines
1.3 KiB
Plaintext
db-aggregates-enabled = true
|
|
db-anon-role = "root"
|
|
db-channel = "postgrest"
|
|
db-channel-enabled = false
|
|
db-extra-search-path = "public, test"
|
|
db-hoisted-tx-settings = "work_mem"
|
|
db-max-rows = 1000
|
|
db-plan-enabled = true
|
|
db-pool = 1
|
|
db-pool-acquisition-timeout = 30
|
|
db-pool-max-lifetime = 3600
|
|
db-pool-max-idletime = 60
|
|
db-pool-automatic-recovery = false
|
|
db-pre-request = "please_run_fast"
|
|
db-prepared-statements = false
|
|
db-root-spec = "openapi_v3"
|
|
db-schemas = "multi, tenant,setup"
|
|
db-config = false
|
|
db-pre-config = "postgrest.pre_config"
|
|
db-tx-end = "rollback-allow-override"
|
|
db-uri = "tmp_db"
|
|
jwt-aud = "https://postgrest.org"
|
|
jwt-role-claim-key = ".user[0].\"real-role\""
|
|
jwt-secret = "c2VjdXJpdHl0aHJvdWdob2JzY3VyaXR5aW5iYXNlNjQ="
|
|
jwt-secret-is-base64 = true
|
|
jwt-cache-max-entries = 86400
|
|
log-level = "info"
|
|
log-query = "main-query"
|
|
openapi-mode = "ignore-privileges"
|
|
openapi-security-active = true
|
|
openapi-server-proxy-uri = "https://postgrest.org"
|
|
server-cors-allowed-origins = "http://example.com"
|
|
server-host = "0.0.0.0"
|
|
server-port = 80
|
|
server-trace-header = "X-Request-Id"
|
|
server-timing-enabled = true
|
|
server-unix-socket = "/tmp/pgrst_io_test.sock"
|
|
server-unix-socket-mode = "777"
|
|
admin-server-port = 3001
|
|
admin-server-host = "127.0.0.1"
|
|
app.settings.test = "test"
|
|
app.settings.test2 = "test"
|