envoyproxy / envoyproxy/gateway

Feature: Add OpenFGA Check API Integration to the Security Policy

Aperta
#3,861 6 commenti 2 reazioni 0 assegnatari Vedi su GitHub
kind/enhancement stale
Lingua principale
Go
Stelle
3k
Fork
864
Merge medio
2g 2h
PR unite (30g)
140

Descrizione

*Description*:
Have a well defined API for creating OpenFGA Check queries in the Security Policy, making it easier to leverage OpenFGA for authorization decisions in Envoy Gateway.

Ideally you should be able to pick up parameter values for the Open FGA Query API request from headers or query parameters in the request.

This simplifies integration with OpenFGA, as the adopter no longer have to write a separate service that sits between Envoy and OpenFGA.

I believe this probably would need some work in Envoy Proxy to make it work though.

*Relevant Links*:
Open FGA (a CNCF project): https://openfga.dev/
The Check API can be found in Relationship Queries: https://openfga.dev/api/service#/Relationship%20Queries
EG Security Policy: https://gateway.envoyproxy.io/contributions/design/security-policy/

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.