feat: add login type 'none' to prevent password login (#8009)

* feat: add login type 'none' to prevent login

Users with this login type must use tokens to authenticate.
Tokens must come from some other source, not a /login with password
authentication
This commit is contained in:
Steven Masley
2023-06-14 12:48:43 -05:00
committed by GitHub
parent cbd49abfcd
commit 6c4c3d6ce5
18 changed files with 160 additions and 41 deletions

11
coderd/apidoc/docs.go generated
View File

@ -6859,10 +6859,13 @@ const docTemplate = `{
"type": "object",
"required": [
"email",
"password",
"username"
],
"properties": {
"disable_login": {
"description": "DisableLogin sets the user's login type to 'none'. This prevents the user\nfrom being able to use a password or any other authentication method to login.",
"type": "boolean"
},
"email": {
"type": "string",
"format": "email"
@ -7621,13 +7624,15 @@ const docTemplate = `{
"password",
"github",
"oidc",
"token"
"token",
"none"
],
"x-enum-varnames": [
"LoginTypePassword",
"LoginTypeGithub",
"LoginTypeOIDC",
"LoginTypeToken"
"LoginTypeToken",
"LoginTypeNone"
]
},
"codersdk.LoginWithPasswordRequest": {

View File

@ -6107,8 +6107,12 @@
},
"codersdk.CreateUserRequest": {
"type": "object",
"required": ["email", "password", "username"],
"required": ["email", "username"],
"properties": {
"disable_login": {
"description": "DisableLogin sets the user's login type to 'none'. This prevents the user\nfrom being able to use a password or any other authentication method to login.",
"type": "boolean"
},
"email": {
"type": "string",
"format": "email"
@ -6818,12 +6822,13 @@
},
"codersdk.LoginType": {
"type": "string",
"enum": ["password", "github", "oidc", "token"],
"enum": ["password", "github", "oidc", "token", "none"],
"x-enum-varnames": [
"LoginTypePassword",
"LoginTypeGithub",
"LoginTypeOIDC",
"LoginTypeToken"
"LoginTypeToken",
"LoginTypeNone"
]
},
"codersdk.LoginWithPasswordRequest": {