konveyor / konveyor/rulesets

[RFE] Translate Java REST RBAC annotation into Istio AuthorizationPolicy

Open
#362 4 comments 0 reactions 0 assignees View on GitHub
kind/feature priority/backlog stale triage/needs-information
Dominant language
Java
Stars
6
Forks
49
PR merge metrics
No merged PRs in 30d

Description

Team inheriting Java legacy code or trying to split code logic from security rules could benefit from Konveyor's help.

Be it SpringBoot or Quarkus, Java annotations are used to define authorizations on method exposing a REST endpoint.
Service Mesh users can rely on [Istio AuthorizatioPolicy](https://istio.io/latest/docs/reference/config/security/authorization-policy/) to delegate the authorization validation to the mesh. This reduces the amount of framework specific code to migrate and maintain and makes it easier to review authorization rules to access an REST service.

Contributor guide

Open the contributing guide

Research direction

The issue names no repository files or tests. Start by reviewing the existing Spring Boot and Quarkus REST authorization annotations alongside the linked Istio AuthorizationPolicy reference; done means defining and implementing a reliable translation that lets authorization rules be delegated to the mesh.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.