Recommendation on authorization of 25+ users with custom roles
Open
AuthN/Z
- Dominant language
- No language data
- Stars
- 346
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
Hello, looking for some direction based on the following:
1. We should only protect sensitive APIs using custom roles as using “authenticated” role is not secure as that won’t block non-invited users. Essentially this quota means we cannot have more than 25 users register for a site that has secure APIs.
2. Using custom authentication providers gets around the invitation flow but does not alter authorization.
What would you recommend to someone needing to scale a static web app past 25+ custom role user quota?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.