Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DRP VDM - Cookie Refreshes/Token Rotation #173

Open
adhdtech opened this issue Jun 1, 2021 · 0 comments
Open

DRP VDM - Cookie Refreshes/Token Rotation #173

adhdtech opened this issue Jun 1, 2021 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@adhdtech
Copy link
Owner

adhdtech commented Jun 1, 2021

Need to update Brokers so that every X minutes they issue cookie refresh commands to both connected Consumers and token timeout updates to peer Brokers. This could also be used for token rotation.

As part of this, the token needs to be a separate object or encapsulated within the DRP_AuthResponse structure. When a Broker authenticates a Consumer, this sequence occurs:

  1. Broker executes authResults = DRP_Node.Authenticate(username, password, null)
  2. If successful, Broker stores authResults in DRP_Node.ConsumerTokens
  3. Broker sends addConsumerToken({ tokenPacket: authResults }) to all Brokers in zone

Need to:

  • Separate authentication from token generation
  • Create standalone token structure
  • Add expiration field to token structure
  • Add timer and logic to rotate consumer tokens on local broker
  • Set timer so that rotation/refresh only occurs if currently connected to VDM
  • Add rotateConsumerToken function to Brokers to process rotation
  • Add rotateConsumerToken function to Consumers to process rotation
  • Determine where timeout values should originate - Authenticator or Broker
  • Update startup process so that new Brokers will obtain tokens from other Brokers in zone
@adhdtech adhdtech added the enhancement New feature or request label Jun 1, 2021
@adhdtech adhdtech added this to the VDM - Virtual Desktop Manager milestone Jun 1, 2021
@adhdtech adhdtech self-assigned this Jun 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant