Azure / Azure/data-api-builder
Determine Social Provider Login Support (Facebook, Google) with StaticWebApps & App Service
- Dominant language
- C#
- Stars
- 1.5k
- Forks
- 370
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 8
Description
Evaluate whether social providers include roles in their access tokens, i.e. via a `role` claim.
- If role claim(s) are included:
- Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
- If users can arbitrarily add themselves to roles, ensure we do NOT honor those roles to determine access in DAB engine and see whether SWA/AppService passes those roles through in the EasyAuth payload.
- If just enterprise admins can manage roles/role assignments, no issues.
- Check whether SWA/AppService passes those roles through in the EasyAuth payload. If not, developers must manage roles through SWA Azure Function Integration.
- No Role claims included:
- Developers must manage roles through SWA Azure Functions (preview) Integration.
Contributor guide
Assessment
This issue has not been assessed yet.