GoogleCloudPlatform / GoogleCloudPlatform/esp-v2

Is google.api.OAuthRequirements supported and what does it do?

Open
#486 5 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
307
Forks
185
Avg merge
14h 45m
Merged PRs (30d)
6

Description

I noticed that [OauthRequirements](https://github.com/googleapis/googleapis/blob/master/google/api/auth.proto#L189:9) is a part of the [AuthenticationRule proto](https://github.com/googleapis/googleapis/blob/master/google/api/auth.proto#L65), but I don't see it on the Cloud Endpoints [AuthenticationRule documentation](https://cloud.google.com/endpoints/docs/grpc-service-config/reference/rpc/google.api#google.api.AuthenticationRule).

Is this supported in Cloud Endpoints/ESPv2, and if so, what does it do? We were hoping to incorporate some level of permissioning based on scopes for our APIs and the scopes found in our JWT Access Tokens.

We use Auth0 that allows us to add permissions to APIs by means of scopes ([doc](https://auth0.com/docs/authorization/rbac/enable-role-based-access-control-for-apis)), so this potential validation in ESPv2 would be a boost for us security-wise.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.