rokwire / rokwire/groups-building-block
[FEATURE] Support Core BB service tokens
@bsdworkin is already working on this.
Since Dec 19, 2022.
- Dominant language
- Go
- Stars
- 1
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
The Core BB has introduced Service Accounts to handle authorization between services: https://github.com/rokwire/core-building-block/issues/306
Describe the solution you'd like
We should support service access tokens for internal APIs and deprecate internal API keys, which are less secure. These internal APIs should be deprecated, but still supported for backwards compatibility. The new APIs should be on the /bbs and /tps subrouters. We will also need to define some permissions for these endpoints.
You can use the new Surveys BB as a reference point for setting up the new BBs and TPS auth handlers; https://github.com/rokwire/surveys-building-block/blob/4b4a9d1aa34f7c4faaab7f1c80f45f8346f9ae4e/driver/web/auth.go#L51
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.