GoogleCloudPlatform / GoogleCloudPlatform/esp-v2
Is google.api.OAuthRequirements supported and what does it do?
- Dominant language
- Go
- Stars
- 307
- Forks
- 185
- Avg merge
- 14h 45m
- Merged PRs (30d)
- 6
Description
I noticed that [OauthRequirements](https://github.com/googleapis/googleapis/blob/master/google/api/auth.proto#L189:9) is a part of the [AuthenticationRule proto](https://github.com/googleapis/googleapis/blob/master/google/api/auth.proto#L65), but I don't see it on the Cloud Endpoints [AuthenticationRule documentation](https://cloud.google.com/endpoints/docs/grpc-service-config/reference/rpc/google.api#google.api.AuthenticationRule).
Is this supported in Cloud Endpoints/ESPv2, and if so, what does it do? We were hoping to incorporate some level of permissioning based on scopes for our APIs and the scopes found in our JWT Access Tokens.
We use Auth0 that allows us to add permissions to APIs by means of scopes ([doc](https://auth0.com/docs/authorization/rbac/enable-role-based-access-control-for-apis)), so this potential validation in ESPv2 would be a boost for us security-wise.
Contributor guide
Assessment
This issue has not been assessed yet.