Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Scopes to Infra Tokens for Authorization #254

Closed
BruceMacD opened this issue Sep 15, 2021 · 1 comment
Closed

Add Scopes to Infra Tokens for Authorization #254

BruceMacD opened this issue Sep 15, 2021 · 1 comment
Assignees
@BruceMacD
Labels
area/api Issue or PR related to the Infra API.

Comments

@BruceMacD
Copy link
Collaborator

BruceMacD commented Sep 15, 2021 •
edited
Loading

When a token is issued to a user or a service (API token) it should be assigned scopes to control which API endpoints it is authorized to access.

https://swagger.io/docs/specification/authentication/
@BruceMacD BruceMacD added area/api Issue or PR related to the Infra API. authorization labels Sep 15, 2021
@BruceMacD BruceMacD self-assigned this Sep 15, 2021
@BruceMacD BruceMacD mentioned this issue Sep 15, 2021
Closed
@jmorganca jmorganca mentioned this issue Sep 21, 2021
Closed
@BruceMacD BruceMacD mentioned this issue Sep 24, 2021
Merged
@BruceMacD
Copy link
Collaborator Author

This will also modify the default API key to only allow for adding destinations and querying the roles endpoint.

@BruceMacD BruceMacD mentioned this issue Oct 4, 2021
Merged
BruceMacD added a commit that referenced this issue Oct 6, 2021
@BruceMacD
API token permissions (#254)
3d8df7b 
* add authz permissions

- Remove api-token commands from the CLI
- Generate a root API token on registry install
- Rename "defaultApiKey" to "engineApiKey"
- Add Infra permissions to OpenAPI spec
- Check API token permissions on use
- Scope engine connection key to only destination registration and listing roles
- Add permissions to API key creation request and list response
- Add API key documentation
- Make docs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@BruceMacD BruceMacD

Labels
area/api Issue or PR related to the Infra API.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@BruceMacD