Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Same RPT token for diff requested path in mix_mode #46

Closed
ldeveloperl1985 opened this issue Mar 21, 2018 · 0 comments
Closed

Use Same RPT token for diff requested path in mix_mode #46

ldeveloperl1985 opened this issue Mar 21, 2018 · 0 comments
Assignees
Milestone

Comments

@ldeveloperl1985
Copy link
Contributor

ldeveloperl1985 commented Mar 21, 2018

  1. User create oauth2-consumer with mix_mode

  2. request to /photo path with oauth2_access_token in the header

  3. introspect_access_token and cache it

  4. control pass to RS plugin

  5. get_rpt and check_Access = granted then cache RPT token {access_token: “AT1”, rpt: “rpt1”, permission: {path:”/post”, method:”GET”}}

  6. Next time user request /picture path with the same oauth2_access_token

  7. mode mix_mode then replace the header with rpt

  8. check the cache. the cached path is /photo but requested path is /picture then here use the same RPT which is already in the cache i:e associated_rpt

@ldeveloperl1985 ldeveloperl1985 added this to the 3.1.3 milestone Mar 21, 2018
@ldeveloperl1985 ldeveloperl1985 self-assigned this Mar 21, 2018
ldeveloperl1985 added a commit that referenced this issue Mar 21, 2018
Used same RPT token for diff paths #46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant