teal-finance / quid Goto Github PK

The Quid API expects "username" within a request body JSON:
https://github.com/synw/quid/blob/master/quidlib/server/api/token.go#L223

But the Quid JWTs contain "name" for the same meaning:
https://github.com/synw/quid/blob/master/quidlib/tokens/claims.go

The database tables also use "name":
https://github.com/synw/quid/blob/master/quidlib/server/models.go

The file https://github.com/synw/quid/blob/master/quidlib/tokens/claims.go has a dependency on https://github.com/dgrijalva/jwt-go but this project has moved to (and is maintained by) https://github.com/golang-jwt/jwt

You may use latest versions:

• github.com/golang-jwt/jwt/v4 v4.1.0
• github.com/karrick/tparse/v2 v2.8.2

Would you accept a GRPC API ?

I need to access quid from various languages and so GPRC makes that easy from flutter, golang and rust.

The existing API can live along side a GRPC, so it wont break the current node based admin gui.

I was actually thinking of making a Admin GUI using flutter web, just easier to manage and extend i find. I guess you however hoe vuejs for a reason and so dont want a PR for this ?

anyway, let me know...

To generate a new refresh_token we provide three values:

• namespace
• username
• password

To request a new access_token we currently must provide the already known namespace:

curl -X POST http://localhost:8082/token/access/10m           \
     -H 'Content-Type: application/json'                      \
     -d '{"refresh_token":"zpXVCJ9...", "namespace":"my_namespace"}'

If we store the namespace information within the refresh_token, we can simplify the access_token request:

curl -X POST http://localhost:8082/token/access/10m           \
     -H 'Content-Type: application/json'                      \
     -d '{"refresh_token":"zpXVCJ9..."}'