Skip to content
#

authorization

Here are 1,559 public repositories matching this topic...

UkonnRa
UkonnRa commented Dec 18, 2019

Is your feature request related to a problem? Please describe.

When querying the Clients/Consent Sessions using pagination, ORY Hydra will only return results with some links, but not the total count of the items, which is useful to display in the frontend, you know, showing the total pages or something.

Describe the solution you'd like

Add the total_count parameter into Hea

tsandall
tsandall commented Feb 11, 2020

We frequently see people asking how they can use OPA to implement authorization and IAM within their apps. There are several examples online like the chef/automate guide but it would be nice to have a first-class guide in the OPA docs for new users to easily discover.

A few things to consider:

  • IAM affects more than just backend APIs. The docs should (eventually) cover how to handle other a
Hobadee
Hobadee commented Nov 9, 2019

Poking around in the code I see references to Constraints. (Silber\Bouncer\Constraints and associated classes)

I have played around with them some and even got them to write out their configuration to the database, but I can't figure out how to actually use them. They appear to be completely undocumented, and I can't quite figure out how they tie into things, although they also appear to be V

geozak
geozak commented Feb 15, 2016

In UserModel::editUserName($new_user_name) you use preg_match to validate the pattern.
wouldn't it be better to use:

if(!RegistrationModel::validateUserName($new_user_name)) {
    return false;
}

instead of retypeing the regular expression

This can apply for email and password too

mitar
mitar commented Mar 27, 2020

Is your feature request related to a problem? Please describe.

I am trying to build an OpenID provider only, I do not really have any resources to which one would delegate access to. So I do not need OAuth provider, just OpenId provider. The issue is that currently documentation/example just says that OAuth handlers have to be registered before OpenId ones, but does not explain which are th

sourabhkumawat
sourabhkumawat commented Oct 31, 2019

I found your work very interesting and I am very enthusiastic to learn from you, I followed the Access Control documentation and I found that there are some mistakes in the code snippets in the documentation which can be confusing for someone who is new to javascript. please if you can review your code snippets once that would be great.
![Annotation 2019-10-31 105139](https://user-images.githubus

asummers
asummers commented Mar 11, 2019

Turns out this is a whitelist that defaults to []. We just got bit pretty hard by this behavior being hidden, so it's worth calling out in the docs. Effectively we had a bunch of plugs all acting on the presence of query params and were very confused why they never seemed to actually trip. This whitelist behavior was very unexpected.

Seems to have been added quite a while back in https://git

Routhinator
Routhinator commented Oct 11, 2018

The documentation provides many examples of things we can do, with zero context on when, why, or pros and cons of each. Like, why would I use a RuleSet? What's the purpose of this feature? When should I use rules vs perms? What's the best way to implement rules in a DRY manner across multiple subapps in a Django project?

authomatic
dirkmoors
dirkmoors commented May 7, 2015

Hi,

In order to be able to use this in my Django Project, I need to be able to use the default Django decorator '@login_required()', which will redirect a user to a 'LOGIN_URL', while providing GET parameter 'next=/page-we-came-from/' after a successfull login has been performed. One the login has been performed, and the redirection to the page we came from has succeeded, the system should see t

Improve this page

Add a description, image, and links to the authorization topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the authorization topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.