{"action":"created","issue":{"url":"https://api.github.com/repos/begriffs/postgrest/issues/703","repository_url":"https://api.github.com/repos/begriffs/postgrest","labels_url":"https://api.github.com/repos/begriffs/postgrest/issues/703/labels{/name}","comments_url":"https://api.github.com/repos/begriffs/postgrest/issues/703/comments","events_url":"https://api.github.com/repos/begriffs/postgrest/issues/703/events","html_url":"https://github.com/begriffs/postgrest/pull/703","id":174938593,"number":703,"title":"Big bag of JWT fixes for accumulated issues","user":{"login":"begriffs","id":911911,"avatar_url":"https://avatars.githubusercontent.com/u/911911?v=3","gravatar_id":"","url":"https://api.github.com/users/begriffs","html_url":"https://github.com/begriffs","followers_url":"https://api.github.com/users/begriffs/followers","following_url":"https://api.github.com/users/begriffs/following{/other_user}","gists_url":"https://api.github.com/users/begriffs/gists{/gist_id}","starred_url":"https://api.github.com/users/begriffs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/begriffs/subscriptions","organizations_url":"https://api.github.com/users/begriffs/orgs","repos_url":"https://api.github.com/users/begriffs/repos","events_url":"https://api.github.com/users/begriffs/events{/privacy}","received_events_url":"https://api.github.com/users/begriffs/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":13,"created_at":"2016-09-04T08:50:01Z","updated_at":"2016-09-25T08:32:23Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/begriffs/postgrest/pulls/703","html_url":"https://github.com/begriffs/postgrest/pull/703","diff_url":"https://github.com/begriffs/postgrest/pull/703.diff","patch_url":"https://github.com/begriffs/postgrest/pull/703.patch"},"body":"Taking the opportunity to make some breaking changes for v0.4\r\n\r\nThis is a work in progress. It removes the default value of `\"secret\"` for JWTs, and responds with an error if someone tries authenticating against a postgrest server which has not been configured with a secret. The new code also adds the convention that a secret beginning with `@` means a filename from which to read the real secret. Reading from a file should allow unicode and binary secrets alike (but this requires testing). Reading from a file also removes sensitive information from the unix process list.\r\n\r\nTwo other JWT requested features not yet addressed are #505 and #567. Are these issues something we still want to fix?\r\n\r\nI'll also be incorporating the custom validation discussed in #632..."},"comment":{"url":"https://api.github.com/repos/begriffs/postgrest/issues/comments/249409749","html_url":"https://github.com/begriffs/postgrest/pull/703#issuecomment-249409749","issue_url":"https://api.github.com/repos/begriffs/postgrest/issues/703","id":249409749,"user":{"login":"ruslantalpa","id":5537246,"avatar_url":"https://avatars.githubusercontent.com/u/5537246?v=3","gravatar_id":"","url":"https://api.github.com/users/ruslantalpa","html_url":"https://github.com/ruslantalpa","followers_url":"https://api.github.com/users/ruslantalpa/followers","following_url":"https://api.github.com/users/ruslantalpa/following{/other_user}","gists_url":"https://api.github.com/users/ruslantalpa/gists{/gist_id}","starred_url":"https://api.github.com/users/ruslantalpa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruslantalpa/subscriptions","organizations_url":"https://api.github.com/users/ruslantalpa/orgs","repos_url":"https://api.github.com/users/ruslantalpa/repos","events_url":"https://api.github.com/users/ruslantalpa/events{/privacy}","received_events_url":"https://api.github.com/users/ruslantalpa/received_events","type":"User","site_admin":false},"created_at":"2016-09-25T08:32:23Z","updated_at":"2016-09-25T08:32:23Z","body":"All except the past point. You are adding back a magic function and that function si very lomited in scope. It's better handled by a start param with a function name and that fn is executed on each request and it can be used for everything (including session based auth)"}}
{"actor":{"display_login":"ruslantalpa"}}