metosin / metosin/compojure-api
Security as first class citizen (with Buddy samples)
Open
Nobody has claimed this yet.
enhancement
help wanted
- Dominant language
- Clojure
- Stars
- 1.1k
- Forks
- 146
- PR merge metrics
- No merged PRs in 30d
Description
separate namespace compojure.api.buddy with registered dispatchers for making it easy to use them from c-api. Something like:
(context* "/api" []
:authenticated? true
(context* "/admin" []
:auth-handlers [admin-access operator-access]
...))
EDIT 18.8.2015. Should be security in general. Goes for Ring-Swagger too.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the proposed compojure.api.buddy namespace and how dispatchers are registered for c-api. Read the issue's nested context* example and consider how the request applies to security generally, including Ring-Swagger. Done should provide a decided, documented security design rather than only the example shown.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- clojure
- Domain
- api, authentication, authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100