18F / hub

77%

18f-pages-internal: 78%

LAST BUILD ON BRANCH embed-access-token

branch: embed-access-token

CHANGE BRANCH

x

Reset

• embed-access-token
• 18f-pages-internal
• 18f-site-onboarding
• about-to-editing
• about-yml
• add-SF-Office
• add-brianhedberg
• add-check-to-travis-18F/about_yml#37
• add-dolores-nginx-conf
• add-eng-team-talks
• add-julia-to-feguild
• add-tests-for-untitled-posts
• adding-location-requirement-for-slack
• adding-pages
• adds-mission
• adjusts-h3-styles
• analytics
• andrewmaier-patch-1
• andrewmaier-patch-2
• annahsebok-patch-1
• annahsebok-patch-2
• annahsebok-patch-3
• arowla-patch-1
• async-search
• awfrancisco-content
• awfrancisco-patch-1
• batemapf-patch-1
• better-403
• blog-mission
• blog-process-clarification
• bsweger-hyperlink-link
• cf
• chart_munger
• chat-conduct
• close-open-redirect
• compress-all-the-things
• consolidate-search-index
• content-edits
• content-guide-301
• copy-edits
• copy-edits-1
• coveralls
• dap-reporting
• design-overhaul
• devops-fixes
• docsprint
• edit-help
• edit-instructions-link
• edit-link-tag
• edits-for-clarity
• emileigh-edits
• emileighoutlaw-patch-1
• emojify
• ethics-information
• expose-build-log
• extract-search-gem
• feature/adjust-h3-add-data
• fix-build
• fix-chart-js
• fix-go-build
• fix-go-script
• fix-invalid-utf-8
• fix-pages-private
• fix-public-links
• fix-skills-interests
• fix-sso-redirect
• fix-static-files
• fix-styles
• fix-tock
• fix-tock-for-real
• fix_communicart_links
• fmla-info
• from_team_api
• front-matter
• gbinal-patch-1
• github-editor
• go-script-gem
• godbout-to-boone
• google-cal-tips
• gsa-gov-access
• hollyallen-patch-1
• jeanninehunter-newsupdate_0409
• jekyll-3-new-beta
• jekyll-3.0.0
• jjg/fix/upate-vulnerable-gems
• jmcarp-patch-1
• js-compressor
• json-options
• jy-aloha-fix
• jy-explain-yml
• jy-fix-lin
• jy-git
• jy-olu
• jy-remove-repetitive-steps
• leave
• link-fixes
• list-styles
• locations-roa
• lock-redcarpet
• logrotate-config
• master
• melodykramer-patch-1
• melodykramer-patch-2
• midas-team
• midas-url
• monkey-patch-reminder
• move-devops-standards
• mtorres253-patch-1
• n00b-to-onboarding
• new-ui
• nyc-team-updates
• oauth2-proxy
• onboarding-edits
• page-speedup
• pages-collection
• pages-internal
• participation-guide
• permalink
• pifs-github
• pifs-on-slack
• prepare-for-staging
• private-images
• production-public
• public-chat
• public-link-fix
• public-move
• qa-public
• redirect-midas-to-openopps
• redirects
• reinstate-incremental-build
• rejoin-wifi-note
• remove-cruft
• remove-dolores-nginx-conf
• remove-gap-restart
• remove-old-data
• remove-ruby-version
• remove-unnecessary-permalinks
• reorganize-front-page
• rm_bower_components
• rogeruiz-typo-link
• ruby-version
• search-config
• search-plugin
• server-side-index
• signal-noise
• skip-index
• slack-pifs
• sso-config
• stats
• stop-shipping-pages-json
• team-api-config
• team-updates
• test-about-yml-18F/about_yml#37
• thecapacity-patch-1
• thecapacity-patch-2
• theresaanna-patch-1
• tock-config-fix
• tock-staging
• training-main-updates
• training-policy-page-update
• training-updates
• travis-container
• tutorial-permalink
• update-about-page
• update-add-contact-info
• update-components
• update-deploy-readme
• update-docs
• update-gems
• update-myusa
• update-nginx
• update-onboarding.md
• update-search
• update-speaking-requests-doc-link
• update-to-news-clip-2_0409
• updating-supervisor-refernce
• validation
• vcs-git
• web-design-standards-proxy-config
• wrap-private-links

Build # 937

Build Type

push

travis-ci

Committed by mbland

Commit Message

Embed access token as Javascript variable via SSI

The motivation for this is to pass the authenticated user's MyUSA access token
through so that Javascript can be used to request Midas data per #211. More
generally, this should allow us to integrate other backend services that
accept MyUSA access tokens. (Care must be taken, of course, to ensure that
tokens are sent only over secure connetions.)

The upstream auth proxy will pass the OAuth `access_token` into the Hub server
via the `X-Forwarded-Access-Token` HTTP header. We then use the Nginx `set`
directive to rewrite this header's value as the `access_token` variable, which
then gets assigned to a Javascript variable via the `#echo` Server-Side
Include directive.

Run Details

618 of 807 relevant lines covered (76.58%)

2.79 hits per line