route gateway htpasswd management through a daemon wire command (#2504)
This commit is contained in:
parent
614e8c6d5a
commit
f1812335d1
9 changed files with 181 additions and 160 deletions
|
|
@ -98,9 +98,10 @@ hivectl github set-token damocles --token <pat> # inline (visible in shell hi
|
|||
## Gateway
|
||||
|
||||
Manage users in the gateway's HTTP Basic auth htpasswd file
|
||||
(`services.hyperhive.gateway.auth`). All commands default to
|
||||
`/var/lib/hyperhive/gateway/gateway.htpasswd`; pass `--file` to target
|
||||
a different path.
|
||||
(`services.hyperhive.gateway.auth`). `hivectl` sends the request over the
|
||||
host admin socket; the `hive-c0re` daemon owns the htpasswd file at its
|
||||
canonical path (`/var/lib/hyperhive/gateway/gateway.htpasswd`) and
|
||||
performs the write.
|
||||
|
||||
```bash
|
||||
hivectl gateway create-user alice --password-stdin # add (or update) user; read password from stdin
|
||||
|
|
@ -109,9 +110,9 @@ hivectl gateway delete-user bob # remove user
|
|||
hivectl gateway list-users # list all usernames, one per line
|
||||
```
|
||||
|
||||
Passwords are hashed with BCrypt (cost 12). The file is created if it
|
||||
does not exist. Re-running `create-user` with the same username updates
|
||||
the password hash in place.
|
||||
Passwords are hashed with BCrypt (cost 12) by the daemon. The file is
|
||||
created if it does not exist. Re-running `create-user` with the same
|
||||
username updates the password hash in place.
|
||||
|
||||
## Agents
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue