Look into authorization consistency
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
- Issue type
- Refactor
- Clarity
- Needs clarification
- Activity status
- Active
- Tech stack
- typescript
- Domain
- authentication, authorization, backend
Research direction
Review the three authorization paths described in the issue and the overlapping access scenario in pull request #101. Compare PAT, client-claim, and OIDC-header authentication across the server interactions. Done means the overlap has a documented, agreed-upon authorization approach rather than an unresolved investigation.
Written by the indexing model from the issue text.
Description
There are multiple authorization paths in the server.
- RS <-> AS interactions where a PAT is required, following the UMA specification.
- Client claims during a token request.
- Other client interactions outside of the specifications, such as policy management and access requests. This uses standard OIDC headers.
The problem is if some of these overlap, which happened in https://github.com/SolidLabResearch/user-managed-access/pull/101, where the client wanted to access the list of registered resources. The current solution is to allow both the PAT flow, and standard client OIDC authentication, but it should be investigated if these can be more aligned since in the end both use OIDC tokens, but slightly differently.
- Dominant language
- TypeScript
- Stars
- 9
- Forks
- 4
- Avg merge
- 4d 21h
- Merged PRs (30d)
- 3
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from SolidLabResearch/user-managed-access
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
-
Difficulty 3/5 1-2 days Newbie friendliness 52/100
SolidLabResearch/user-managed-access#87 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 30/100
-
research UCP UMA
SolidLabResearch/user-managed-access#27 · 1 assignee ·
-
research UCP UMA
SolidLabResearch/user-managed-access#26 · 1 assignee ·
All issues in SolidLabResearch/user-managed-access
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Eynzof/Hermes-CN-Desktop#610 ·
-
bug clawsweeper:linked-pr-open clawsweeper:needs-live-repro clawsweeper:no-new-fix-pr impact:message-loss issue-rating: 🐚 platinum hermit P2 regression
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
calcite-components needs triage refactor
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Esri/calcite-design-system#15203 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
danielmiessler/LifeOS#2218 ·