Azure / Azure/data-api-builder

Determine Social Provider Login Support (Facebook, Google) with StaticWebApps & App Service

Open
#719 12 comments 0 reactions 1 assignee Claimed by @ayush3797 View on GitHub
auth investigation security
Dominant language
C#
Stars
1.5k
Forks
370
Avg merge
3d 17h
Merged PRs (30d)
8

Description

Evaluate whether social providers include roles in their access tokens, i.e. via a `role` claim.
- If role claim(s) are included:
- Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
- If users can arbitrarily add themselves to roles, ensure we do NOT honor those roles to determine access in DAB engine and see whether SWA/AppService passes those roles through in the EasyAuth payload.
- If just enterprise admins can manage roles/role assignments, no issues.
- Check whether SWA/AppService passes those roles through in the EasyAuth payload. If not, developers must manage roles through SWA Azure Function Integration.
- No Role claims included:
- Developers must manage roles through SWA Azure Functions (preview) Integration.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.