hasura / hasura/graphql-engine
forward x-hasura-admin-secret header to remote schema?
Open
a/api/graphql
a/authz
c/remote-schemas
c/server
e/easy
k/enhancement
p/medium
- Dominant language
- TypeScript
- Stars
- 32.1k
- Forks
- 3k
- PR merge metrics
- PR metrics pending
Description
When using x-hasura-admin-secret, remote schema service can only get 'X-Hasura-Role' which is admin.
It can not distinguish that it's real admin or the 'X-Hasura-Role' header is set to admin by user himself.
Contributor guide
Assessment
This issue has not been assessed yet.