Azure / Azure/data-api-builder

Determine Social Provider Login Support (Facebook, Google) with StaticWebApps & App Service

Abierto
#719 12 comentarios 0 reacciones 1 asignado Reclamado por @ayush3797 Ver en GitHub
auth investigation security
Lenguaje dominante
C#
Estrellas
1.5k
Forks
370
Merge medio
3 d 22 h
PR fusionados (30 d)
9

Descripción

Evaluate whether social providers include roles in their access tokens, i.e. via a `role` claim.
- If role claim(s) are included:
- Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
- If users can arbitrarily add themselves to roles, ensure we do NOT honor those roles to determine access in DAB engine and see whether SWA/AppService passes those roles through in the EasyAuth payload.
- If just enterprise admins can manage roles/role assignments, no issues.
- Check whether SWA/AppService passes those roles through in the EasyAuth payload. If not, developers must manage roles through SWA Azure Function Integration.
- No Role claims included:
- Developers must manage roles through SWA Azure Functions (preview) Integration.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.