goauthentik / goauthentik/authentik
Restrict an app password or token to a subset of permissions or one application
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
## What
restrict an app password / token to a subset of permissions or a specific application.
## Want
- Restrict an app password / token to a subset of permissions or a specific application
## Ideas this came from
- [#6794 App password with limited scope](https://github.com/goauthentik/authentik/issues/6794) — Currently app passwords grant full permission set same as user have It would be nice to have option to limit app passwords to a sub set of permissions user have
- [#12085 Restrict app passwords / tokens for specific application](https://github.com/goauthentik/authentik/issues/12085) — I need users to permanently store their credentials in an Android app. Currently the backend of the app does the authentication against authentik. This app does
Contributor guide
Research direction
No files, tests, or entry points are identified. Start by reading linked issues #6794 and #12085 to understand the requested app-password and token restrictions; done means supporting permission subsets or application-specific restrictions as defined by the resulting design.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100