FIWARE / api-umbrella

Open source API management platform
https://fiware-api-umbrella.readthedocs.io/
MIT License
2 stars 7 forks source link

Add additional attribute-based authorization mode for XACML via AuthzForce #20

Open dwendland opened 2 years ago

dwendland commented 2 years ago

This should be added as additional authorization mode to role-based (the default) and iSHARE-compliant (implemented here: https://github.com/FIWARE/api-umbrella/blob/master/src/api-umbrella/proxy/middleware/policy_validator_cb_ishare_auto.lua), but will be similar to the iSHARE-compliant one.

It can use the policy parameter evaluation functions from the utility module implemented in #16 . Therefore the policy-handling will be similar, but interactions with authorisation registries and JWT token validation and verification will be different.