Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enforce auth on /workspaces/{workspace_id} endpoint #221

Closed
3 tasks
christoferlof opened this issue Jun 8, 2021 · 0 comments · Fixed by #376
Closed
3 tasks

Enforce auth on /workspaces/{workspace_id} endpoint #221

christoferlof opened this issue Jun 8, 2021 · 0 comments · Fixed by #376
Assignees
Labels
api Composition Service API auth Authentication and authorization story Stories are the smallest unit of work to be done for a project.
Milestone

Comments

@christoferlof
Copy link
Contributor

christoferlof commented Jun 8, 2021

Description

As a researcher
I want to be able to access the information about a specific workspace
So that I can connect to it and use its deployed services

Acceptance criteria

  • Access token validated for Oidc audience matching the Oidc audience set in the workspace config. (We have sample in spike, contact @christoferlof or @marrobi for pointer)
  • General validity of access token checked
  • Access token needs to contain Workspace owner or Researcher role claim for access.

Depends on #307 to be finished

@christoferlof christoferlof added api Composition Service API story Stories are the smallest unit of work to be done for a project. auth Authentication and authorization labels Jun 8, 2021
@christoferlof christoferlof added this to the Next milestone Jun 8, 2021
@christoferlof christoferlof modified the milestones: Next, June 2021.2 Jun 10, 2021
@msebragge msebragge assigned msebragge and unassigned msebragge Jun 24, 2021
@TessFerrandez TessFerrandez self-assigned this Jun 27, 2021
@TessFerrandez TessFerrandez linked a pull request Jun 28, 2021 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api Composition Service API auth Authentication and authorization story Stories are the smallest unit of work to be done for a project.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants