Azure / Azure/data-api-builder
[OBO] End‑to‑End OBO & RLS Validation
Open
obo
- Dominant language
- C#
- Stars
- 1.5k
- Forks
- 370
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 8
Description
Validate full end‑to‑end delegated identity behavior including SQL RLS.
- Validate:
1. SUSER_NAME() reflects delegated user
2. RLS filters rows per user
3. guest/B2B users succeed
- Validate HTTP mapping
1. invalid/missing token → 401
2. missing identity claims → 401
3. OBO failure → 401
4. SQL permission denied → 403
Contributor guide
Assessment
This issue has not been assessed yet.