Repository navigation

Enforce mTLS + OAuth on all event REST APIs (CNF-26787) - #113

Open

jzding wants to merge 19 commits into

redhat-cne:mainfrom

jzding:secure-event-api-all

Open

Enforce mTLS + OAuth on all event REST APIs (CNF-26787)#113
jzding wants to merge 19 commits into
redhat-cne:mainfrom
jzding:secure-event-api-all

Commits on Sep 9, 2026
- Add mTLS and OAuth authentication to event REST API
  jzding
  committed
  e3bea2f
- clean up server/client AuthConfig struct
  jzding
  committed
  513e769
- Update Swagger documentation with comprehensive authentication support
  jzding
  committed
  68a37aa
- add oran doc
  jzding
  committed
  93b8a73
- Add mTLS and OAuth authentication documentation to O-RAN specification
  jzding
  committed
  280bc42
- remove Openshift specific details in oran docs
  jzding
  committed
  1f75025
- Enforce mTLS+OAuth on all APIs, TokenReview validation, TLS profile
  
  jzding
  and
  claude
  committed
  da663fa
- Export ApplyTLSProfile for client-side TLS profile reuse
  
  jzding
  and
  claude
  committed
  6aaccdb
- Fix gosec G402 and harden endpoint SSRF at dial time
  
  jzding
  and
  claude
  committed
  7f73e7b
Commits on Sep 10, 2026
- test: fix gosec G402 lint and remove committed store artifacts
  
  jzding
  and
  claude
  committed
  65ede7d
- test: fix double-slash CurrentState URLs breaking with no-redirect client
  
  jzding
  and
  claude
  committed
  6fe1192
- Address PR #113 review: SSRF-harden initial POST, fail-closed CA, doc/swagger fixes
  
  jzding
  and
  claude
  committed
  ac22e28
- v2/server: remove unauthenticated debug echo handler at base path
  
  jzding
  and
  claude
  committed
  9688905
- v2/server: add WriteTimeout, IdleTimeout, MaxHeaderBytes hardening
  
  jzding
  and
  claude
  committed
  18cd3ed
- v2: bound request-body reads and clarify conditional auth in swagger
  
  jzding
  and
  claude
  committed
  c6e15b6
Commits on Oct 1, 2026
- v2: authenticate outbound pushes under mTLS and OAuth
  
  jzding
  and
  claude
  committed
  87df14c
- CNF-26787: document outbound push-leg client authentication
  
  jzding
  and
  claude
  committed
  a7ed0a0
- CNF-26787: fix push-leg auth review findings and lint
  
  jzding
  and
  claude
  committed
  2b399ca
- CNF-26787: satisfy goconst and govet shadow linters
  
  jzding
  and
  claude
  committed
  b54cbdc

Commits

Commits on Sep 9, 2026

Commits on Sep 10, 2026

Commits on Oct 1, 2026