Skip to content
This repository has been archived by the owner on Dec 6, 2022. It is now read-only.

Should we update roles on every external access? #28

Open
th0mas opened this issue Sep 23, 2020 · 1 comment
Open

Should we update roles on every external access? #28

th0mas opened this issue Sep 23, 2020 · 1 comment
Assignees
Labels

Comments

@th0mas
Copy link
Collaborator

th0mas commented Sep 23, 2020

@nelsonic, now that dwyl/auth#121 is fixed we can now check roles with the central server easily.

I think we should do this more secure but longer check on external access only, and rely on our local cache for internal doors (which is much quicker).

I'll build in a "failsafe" option so if the external server/internet goes down the system will revert back to its internal cache.

How does this sound to you?

@nelsonic
Copy link
Member

@th0mas sounds good. 👍
The the endpoint is implemented from the auth side but not yet in rbac
(which I think makes sense given that it already has the necessary dependencies)
Please let me know if you need anything else to make progress on this.

@nelsonic nelsonic assigned th0mas and unassigned nelsonic Sep 23, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants