OpenConext / OpenConext/OpenConext-access

admin access via invite role

Open
#765 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
4
Forks
0
Avg merge
1d 14h
Merged PRs (30d)
22

Description

In addition of specifying admin user ids in the config super-admin.users, I would like to be able to specify an Invite role (i.e., isMemberOf claim).

So I probose adding a super-admin.roles. Any user with a isMemberOf claim that includes one of values specified there, should become super-admin.

It is probably useful to keep the current super-admin.users mechanism, which is easier for testing locally and on test2, and might serve as a backup.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Locate the code that reads the super-admin.users configuration and evaluates the isMemberOf claim. Trace how super-admin status is assigned, then add support for super-admin.roles while preserving the existing user-ID mechanism. Done means matching role values grant super-admin access and the current user-ID path still works.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
authorization
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.