Azure / Azure/data-api-builder

Determine Social Provider Login Support (Facebook, Google) with StaticWebApps & App Service

Aperta
#719 12 commenti 0 reazioni 1 assegnatario Rivendicata da @ayush3797 Vedi su GitHub
auth investigation security
Lingua principale
C#
Stelle
1.5k
Fork
370
Merge medio
3g 17h
PR unite (30g)
8

Descrizione

Evaluate whether social providers include roles in their access tokens, i.e. via a `role` claim.
- If role claim(s) are included:
- Can an end user can arbitrarily add themselves to roles or is that capability limited to FB app/enterprise admins?
- If users can arbitrarily add themselves to roles, ensure we do NOT honor those roles to determine access in DAB engine and see whether SWA/AppService passes those roles through in the EasyAuth payload.
- If just enterprise admins can manage roles/role assignments, no issues.
- Check whether SWA/AppService passes those roles through in the EasyAuth payload. If not, developers must manage roles through SWA Azure Function Integration.
- No Role claims included:
- Developers must manage roles through SWA Azure Functions (preview) Integration.

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.