Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow API calls on-behalf of associated accounts #92

Conversation

tharindu-b-hewage
Copy link
Contributor

Proposed changes in this pull request

  • Fixes Calling REST APIs On-behalf Of My Associated Accounts wso2/product-is#6882.
  • Introduces a new header AssociatedUserId.
  • The above-header will contain a fully qualified user name of a user(ex: SECONDARY/john@wso2.com).
  • When a REST API call is made to the WSO2 IS, this PR ensures that, if the user represented by the above header has a valid association with the authenticated user, the REST API call will be done on behalf of the user represented by the header AssociatedUserId.
  • An example would be calling the SCIM /me endpoint of the user A, but authenticated as the user B, where users A and B are associated users.

@tharindu-b-hewage
Copy link
Contributor Author

Please refer to wso2/product-is#6882

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Calling REST APIs On-behalf Of My Associated Accounts
3 participants