Alan-Jowett / CoPilot-For-Consensus / 20477561674

78%

push

github

Add JWT authentication to Grafana with role-based access control (#563)

* Initial plan

* Add JWT authentication for Grafana - backend changes

- Configure Grafana with JWT auth environment variables
- Update nginx to forward Authorization header to Grafana
- Add public key endpoints to auth service
- Create setup script to extract public key

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Add JWT authentication for Grafana - frontend changes

- Install jwt-decode package
- Update AuthContext to extract admin claim from JWT
- Create AdminLinks component for Grafana link
- Integrate AdminLinks in AppLayout
- Add CSS styling for admin section

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Add tests and documentation for JWT authentication

- Add test for public key endpoints
- Create comprehensive testing documentation
- Document troubleshooting steps

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Optimize AuthContext initialization to avoid duplicate localStorage reads

Address code review feedback by consolidating initialization logic

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Add comprehensive implementation summary document

Document architecture, security considerations, and setup instructions

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Fix CI: Create placeholder public key before starting Grafana

Docker was creating auth_service_public_key.pem as a directory when the file didn't exist. This fix creates a placeholder public key file before Grafana starts, preventing the "is a directory" error.

The placeholder uses the same jwt_public_key generated during CI setup, which allows Grafana to start successfully. The actual public key from the auth service can replace it later via the setup script.

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Addres... (continued)

1 of 8 new or added lines in 1 file covered. (12.5%)

5783 of 7717 relevant lines covered (74.94%)

0.84 hits per line