apache / apache/openwhisk-apigateway
Security block has to be repeated on api and tenant scope
- Dominant language
- Lua
- Stars
- 65
- Forks
- 43
- PR merge metrics
- No merged PRs in 30d
Description
the existing api object looks like this when you have security scoped to a tenant
```
{
"name":"test",
"tenantId":"something-something-something",
"basePath":"/v1"
"resources": {
"/test": {
"operations":{
"GET": {
"upstreamUrl":"http://test.com/entity",
"upstreamMethod":"GET",
"security":{
"type":"oauth",
"provider":"google",
"scope":"api"
}
},
"POST": {
"upstreamUrl":"http://test.com/entity",
"upstreamMethod":"GET",
"security":{
"type":"oauth",
"provider":"google",
"scope":"api"
}
}
}
}
}
}
```
it should look like this:
```
{
"name":"test",
"tenantId":"something-something-something",
"basePath":"/v1",
"resources":{
"/test": {
"operations":{
"GET": {
"upstreamUrl":"http://test.com/entity",
"upstreamMethod":"GET",
},
"POST": {
"upstreamUrl":"http://test.com/entity",
"upstreamMethod":"GET",
}
}
}
},
"security":{
"type":"oauth",
"provider":"google"
}
}
```
Contributor guide
Assessment
This issue has not been assessed yet.