Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Call an external service to enrich the internal session state #277

Open
Sbou opened this issue Oct 17, 2019 · 1 comment
Labels

Comments

@Sbou
Copy link
Contributor

@Sbou Sbou commented Oct 17, 2019

Is your feature request related to a problem? Please describe.

In the Oathkeeper decision engine, it's not possible to call an external service to add context in the request sent to Keto.

Describe the solution you'd like

We have the ability to do that at the mutator step with "hydradator" but not before the authorizer step.
Following the XACML definition, I would like to call a PIP service from the PEP (Oathkeeper) or the PDP (Keto) services.

XACML definition

Describe alternatives you've considered

At the moment, I have to call this external service before to call Oathkeeper and add the context in the url of the access rule.

@aeneasr

This comment has been minimized.

Copy link
Member

@aeneasr aeneasr commented Oct 17, 2019

/cc @piotrmsc

@aeneasr aeneasr added the enhancement label Oct 17, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.