Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Connexion-compatible token validation #82

Closed
uniqueg opened this issue Nov 14, 2020 · 0 comments · Fixed by #83
Closed

Connexion-compatible token validation #82

uniqueg opened this issue Nov 14, 2020 · 0 comments · Fixed by #83
Assignees
Labels
priority: high High priority type: auth Related to authorization or authentication workload: days Likely takes days to resolve
Milestone

Comments

@uniqueg
Copy link
Member

uniqueg commented Nov 14, 2020

Since Connexion 2.0, Connexion helps with validation of Swagger 2 / OpenAPI 3 security schemas. While this is in princple welcome, it inteferes with the functionality of the dedicated auth/security decorator implemented in FOCA.

In order to be compatible with Connexion, an x-{auth_method}TokenInfo field needs to be added to the securityDefinitions (Swagger 2) or securitySchemes (OpenAPI 3) objects, where {auth_method} is one of several options, depending on the version of the OpenAPI specificaiton.

This will require a major refactoring in various places (decorator in security.auth module needs to be re-factored/-implemented, the API registration needs to be udpated, and likely a lot of tests will be affected, too).

@uniqueg uniqueg added priority: high High priority type: auth Related to authorization or authentication workload: days Likely takes days to resolve labels Nov 14, 2020
@uniqueg uniqueg self-assigned this Nov 14, 2020
@uniqueg uniqueg added this to To do in ELIXIR BioHackathon 2020 via automation Nov 14, 2020
ELIXIR BioHackathon 2020 automation moved this from To do to Done Nov 14, 2020
@uniqueg uniqueg added this to the v1.0.0 milestone Feb 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
priority: high High priority type: auth Related to authorization or authentication workload: days Likely takes days to resolve
Projects
No open projects
Development

Successfully merging a pull request may close this issue.

1 participant