Replace Endpoint middleware concept with Security concept

[jdegoes]

Right now, we cannot enforce that endpoint middleware is actually implemented (it's a very complicated problem that cannot be solved in time for release). Simultaneously, we cannot document security requirements of endpoints.

To fix this issue, we should instead use a sealed trait AuthType, or similar, which is placed into Endpoint. Based on this, we can generate OpenAPI documentation, as well as potentially even leverage this information in the automatic HTTP client.

sealed trait AuthType {
  type ClientRequirements
  type ServerRequirements
}
object AuthType {
  case object Basic extends AuthType {
    type ClientRequirements = ...
    type ServerRequirements = ...
  }
  ... 
}

Note that endpoint auth type would still be a type parameter, albeit constrained (Z <: AuthType). The reason is to statically retain the type members inside the AuthType value, so they can be used by client and server.

This requires more R&D but should address all of the issues with endpoint middleware that we have, currently. The question is, can we do it in time? 😄

[jdegoes]

/bounty $1500

[algora-pbc]

💎 $1,500 bounty • ZIO

Steps to solve:

1. Start working: Comment /attempt #2888 with your implementation plan
2. Submit work: Create a pull request including /claim #2888 in the PR body to claim the bounty
3. Receive payment: 100% of the bounty is received 2-5 days post-reward. Make sure you are eligible for payouts

Thank you for contributing to zio/zio-http!

Add a bounty • Share on socials

Attempt	Started (GMT+0)	Solution
🔴 @987Nabil	Jun 6, 2024, 7:04:48 PM	#2947
🔴 @promisingcoder	Jul 2, 2024, 10:05:25 PM	WIP

[987Nabil]

/attempt

Algora profile	Completed bounties	Tech	Active attempts	Options
@987Nabil	35 ZIO bounties + 1 bounty from 1 project	Scala		Cancel attempt

[algora-pbc]

@987Nabil: Reminder that in 7 days the bounty will become up for grabs, so please submit a pull request before then 🙏

[algora-pbc]

The bounty is up for grabs! Everyone is welcome to /attempt #2888 🙌

[987Nabil]

/attempt

[987Nabil]

Will be streaming the impl. tomorrow or on the weekend

[promisingcoder]

/attempt #2888

Options

• Cancel my attempt

[algora-pbc]

💡 @987Nabil submitted a pull request that claims the bounty. You can visit your bounty board to reward.

[algora-pbc]

@promisingcoder: Reminder that in 7 days the bounty will become up for grabs, so please submit a pull request before then 🙏

[algora-pbc]

The bounty is up for grabs! Everyone is welcome to /attempt #2888 🙌

[algora-pbc]

🎉🎈 @987Nabil has been awarded $1,500! 🎈🎊

• Share on socials
• Give feedback