Skip to content

Conversation

sergio-correia
Copy link
Contributor

Here we integrated authentication middleware into ResilientClient with automatic token
management and refresh, establishing an authentication system that transparently handles
TPM-based challenge-response authentication for HTTP clients.

@sergio-correia sergio-correia marked this pull request as draft September 3, 2025 11:12
Copy link

codecov bot commented Sep 3, 2025

Codecov Report

❌ Patch coverage is 41.26984% with 111 lines in your changes missing coverage. Please review.
✅ Project coverage is 57.84%. Comparing base (ce52222) to head (9dc6ee9).

Files with missing lines Patch % Lines
keylime/src/resilient_client.rs 41.08% 76 Missing ⚠️
keylime/src/auth.rs 41.66% 35 Missing ⚠️
Additional details and impacted files
Flag Coverage Δ
e2e-testsuite 57.84% <41.26%> (-0.26%) ⬇️
upstream-unit-tests 57.84% <41.26%> (-0.26%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
keylime-push-model-agent/src/main.rs 40.54% <ø> (-1.36%) ⬇️
keylime/src/auth.rs 41.84% <41.66%> (ø)
keylime/src/resilient_client.rs 49.82% <41.08%> (-8.18%) ⬇️

... and 4 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Add new constructor methods for creating AuthenticationClient instances
that use raw HTTP clients without middleware, preventing infinite loops
when used by authentication middleware.

Signed-off-by: Sergio Correia <[email protected]>
Move authentication types (AuthConfig, SessionToken, TpmOperations)
from keylime-push-model-agent to the core keylime library to enable
sharing between different components.

This refactoring creates a clean foundation for the
authentication middleware integration.

Signed-off-by: Sergio Correia <[email protected]>
Add transparent authentication middleware to ResilientClient using
the challenge-response protocol with proper concurrency control.
This implementation uses the shared auth types from the core library.

Signed-off-by: Sergio Correia <[email protected]>
This commit integrates the authentication middleware implementation
with the AuthenticationClient that was moved to the core keylime library,
completing the authentication integration.

Signed-off-by: Sergio Correia <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant