Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there a way to fitler the servers that can obtain credentials from jscas-server? #10

Open
leaf-node opened this issue Jun 6, 2018 · 1 comment
Labels

Comments

@leaf-node
Copy link
Contributor

I suspect that https://github.com/jscas/jscas-server/blob/master/lib/plugins/jsServiceRegistry/index.js might have to do with it, but I'm not sure.

What I'm looking to do is to filter clients based on a set of IP address ranges. We tend to add and remove servers with CAS clients on a regular basis, so an IP range fitler would make the most sense for that use case. Is this supported by jscas-server as is?

Thanks! : D

@jsumners
Copy link
Contributor

jsumners commented Jun 7, 2018

You have a couple options. The easiest would be to filter the requests at your proxy server, e.g. HAProxy. But typically a CAS server filters access by service URL. In that case, the production ready https://github.com/jscas/jscas-pg-registries will suit your needs. However, if you need a registry that supports limiting queries by IP address, you will need to write your own registry plugin.

The plugins included in the base install, i.e. npm install jscas-server, are not meant for production use. This is very clearly stated in the readme.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants