Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Handle user roles #25

Closed
nioc opened this issue Feb 14, 2016 · 1 comment
Closed

Handle user roles #25

nioc opened this issue Feb 14, 2016 · 1 comment
Assignees
@nioc
Labels
authentification feature
Milestone
Minimal scope

Comments

@nioc
Copy link
Owner

nioc commented Feb 14, 2016

Roles allow users to access restricted page (like admin) and restricted API (like user creation).

This features must:

  • provides an API function to check if user is granted to access requested resource.
  • returns a 403 HTTP status for accessing restricted API without required role.
  • sets scope attribute with a user roles array in in the JSON Web Token.
  • checks required scope if user accessing restricted GUI.
@nioc nioc self-assigned this Feb 14, 2016
@nioc nioc mentioned this issue Feb 14, 2016
Closed
nioc added a commit that referenced this issue Feb 23, 2016
@nioc
Add scope and users management
53cde89 
Part of #25.
Store user identifier during API request for allow checking his scope.
Add a method in API class for checking if user is granted on the required scope.
According to RFC 6749, transform token scope from array to space-delimited strings.
nioc added a commit that referenced this issue Feb 25, 2016
@nioc
Add user creation and scope edition for admin
d1120a7 
Complete #25.
nioc referenced this issue Feb 27, 2016
@nioc
Secure API
a4965d4 
Close #34.
Update API documentation.
@nioc
Copy link
Owner Author

nioc commented Feb 27, 2016

Closed by d1120a7

@nioc nioc closed this as completed Feb 27, 2016
@nioc nioc added this to the Minimal scope milestone Feb 27, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@nioc nioc

Labels
authentification feature
Projects
None yet
Milestone
Minimal scope
Development

No branches or pull requests
1 participant
@nioc