Skip to content

docs(adr): Add ADR 0005 - Authorization Middleware Implementation#1557

Merged
vairav merged 1 commit intodevelopfrom
adr/access-management-transparent-proxy
Feb 11, 2026
Merged

docs(adr): Add ADR 0005 - Authorization Middleware Implementation#1557
vairav merged 1 commit intodevelopfrom
adr/access-management-transparent-proxy

Conversation

@vairav
Copy link
Collaborator

@vairav vairav commented Feb 2, 2026

Summary

  • Adds ADR 0005 (Authorization Middleware Implementation) to docs/source/decisions/
  • Documents the transparent proxy architecture with OPA policy integration
  • Status: Implemented

Changes

  • Added docs/source/decisions/0005-data-authorization-middleware.md
  • Updated docs/source/decisions/index.rst with new toctree entry
  • Removed docs/source/rfc/ directory (content moved to decisions)

Key Topics Covered

  • Transparent proxy architecture with OPA policy engine
  • Office-based access control for 7 user personas
  • Embargo rules and time window constraints
  • Integration with Keycloak authentication
  • Redis caching for performance

Test Plan

  • Verify documentation renders correctly in Sphinx
  • Review technical accuracy against implemented code
  • Confirm cross-references to companion ADRs (0006, 0007) are valid

@MikeNeilson
Copy link
Contributor

Please move the files to the "decisions" directory, see https://github.com/USACE/cwms-data-api/tree/develop/docs/source/decisions, also start from file number 0005.

Move authorization middleware decision record to docs/source/decisions/
directory and renumber from 0001 to 0005 to follow existing convention.
Remove docs/source/rfc/ directory.
@vairav vairav force-pushed the adr/access-management-transparent-proxy branch from 15ab123 to fdedc39 Compare February 11, 2026 11:26
@vairav vairav changed the title docs(adr): Update ADR 0001 - Authorization Middleware Implementation Status docs(adr): Add ADR 0005 - Authorization Middleware Implementation Feb 11, 2026
@vairav vairav marked this pull request as ready for review February 11, 2026 11:47
@vairav vairav merged commit e3dee91 into develop Feb 11, 2026
7 of 8 checks passed
@vairav vairav deleted the adr/access-management-transparent-proxy branch February 11, 2026 16:54
vairav added a commit that referenced this pull request Feb 13, 2026
…xt-and-filters

* origin/develop:
  There is no reason that the filtered time series needs to test agains… (#1580)
  fix paging for rating spec getAll endpoint (#1578)
  docs(adr): Add ADR 0005 - Authorization Middleware Implementation (#1557)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants