Make auth guidelines more explicit

Open
#544 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
45/100
Issue type
Documentation
Clarity
Mostly clear
Activity status
Stale
Domain
authentication, documentation, security

Research direction

No file or test is named in the issue. Start by finding the existing authentication guidance and the section covering new services; done means the managed-identity requirement and connection-string discouragement are stated explicitly.

Written by the indexing model from the issue text.

Description

We should add guidelines that require new services to start with managed identity, explicitly discourage the use of connection strings, etc. We're always telling that to service teams during reviews, but making it explicit would be helpful too.

Dominant language
No language data
Stars
23.3k
Forks
2.7k
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from microsoft/api-guidelines

All issues in microsoft/api-guidelines

Similar issues

More Security issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.