SolidLabResearch / SolidLabResearch/user-managed-access

Thoughts about partial permissions

Open
#95 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
9
Forks
4
Avg merge
4d 21h
Merged PRs (30d)
3

Description

Copied from https://github.com/SolidLabResearch/user-managed-access/pull/91 for posterity

  • My main concern is that in the future this might conflict with wanting to throw a NeedInfo error instead returning a partial token. This is also the reason I put this feature in a separate config that needs to be added to enable this.
  • Alternative could be that the client has to indicate in the request that they are OK with receiving a partial result, but the client might not know this.
  • A more extreme alternative might be that the RS can do more advanced ticket requests where boolean operators are introduced.
  • Currently the output includes a boolean to indicate that a token is partial.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named. Start by reviewing the permission and token-handling areas of the repository, then read the copied discussion and identify the intended behavior and configuration contract. Work is done only once the project agrees on whether partial tokens, NeedInfo errors, or another approach is required.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authorization, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.