fix: SB-29941 allow GET methods on public key retrieval API (project-…

…sunbird#3334)
kirantrigyn · May 16, 2022 · d46bd45 · d46bd45
1 parent 00c331b
commit d46bd45
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 1 deletion.
diff --git a/kubernetes/opa/registry/policies.rego b/kubernetes/opa/registry/policies.rego
@@ -54,5 +54,5 @@ searchRCCertificate {
 
 # Retrieve public key API
 getRCPublicKey {
-  http_request.method == "POST"
+  http_request.method in ["POST", "GET"]
 }
diff --git a/kubernetes/opa/registry/policies_test.rego b/kubernetes/opa/registry/policies_test.rego
@@ -218,4 +218,21 @@ test_rc_certificate_search_public_key {
         "filter": {}
       }
     }
+}
+
+test_rc_certificate_get_public_key {
+    data.main.allow.allowed
+    with data.common.current_time as current_time
+    with data.common.iss as iss
+    with input as
+    {
+      "attributes": {
+        "request": {
+          "http": {
+            "path": "/api/v1/PublicKey/search/1-ab8bb63e-d4f2-11ec-9a7d-07cc64ac49c1",
+            "method": "GET"
+          }
+        }
+      }
+    }
 }