Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Add a Role-Based Access Control (Authorization) microservice #14

Open
3 tasks
ByronBecker opened this issue Oct 18, 2022 · 0 comments
Open
3 tasks
Assignees
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@ByronBecker
Copy link
Contributor

Motivation

Developers may wish to use a RBAC Authorization scheme into their service actors and partitions, allowing them to more easily permit different levels of access to partitions or entities stored within CanDB. Having an RBAC service (that uses CanDB) allows an application to more easily associate principals with more complex and specific permissions, and allows for these permissions to be universally trusted and accepted across a multi-canister application.

Requirements

  • RBAC actor that allows applications to store principal to role relations
  • Generates JWT or other AuthZ token to wrap the user’s roles with a TTL & mechanism to combat replay attacks
  • Mechanism for one-time dispersal of public key to existing service actors in order to efficiently authorize the caller without requiring an inter-canister call every time.
@ByronBecker ByronBecker added the enhancement New feature or request label Oct 18, 2022
@ByronBecker ByronBecker self-assigned this Oct 18, 2022
@ByronBecker ByronBecker removed their assignment Nov 7, 2022
@ByronBecker ByronBecker added the help wanted Extra attention is needed label Nov 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants