[RFE] Translate Java REST RBAC annotation into Istio AuthorizationPolicy
- Dominant language
- Java
- Stars
- 6
- Forks
- 49
- PR merge metrics
- No merged PRs in 30d
Description
Team inheriting Java legacy code or trying to split code logic from security rules could benefit from Konveyor's help.
Be it SpringBoot or Quarkus, Java annotations are used to define authorizations on method exposing a REST endpoint.
Service Mesh users can rely on [Istio AuthorizatioPolicy](https://istio.io/latest/docs/reference/config/security/authorization-policy/) to delegate the authorization validation to the mesh. This reduces the amount of framework specific code to migrate and maintain and makes it easier to review authorization rules to access an REST service.
Contributor guide
Research direction
The issue names no repository files or tests. Start by reviewing the existing Spring Boot and Quarkus REST authorization annotations alongside the linked Istio AuthorizationPolicy reference; done means defining and implementing a reliable translation that lets authorization rules be delegated to the mesh.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100