An open source enterprise digital identity platform for CIAM or workforce... Janssen is a distribution of standards-based, developer friendly, components that are engineered to work together in any cloud. #OAuth #OpenID #FIDO
Should this be used to provide more information on requests that were not authorized?
pop_logs design
Say a binding calls pop_logs. The binding implementation in Rust calls that on the Cedarling instance. Logs are removed from the Cedarling instance, by the pop_logs implementation.
The log entries are then converted by the binding code to some other representation. But something goes wrong, and the conversion code throws an error. The logs are now lost. This would not be acceptable.
Implementation Details
description field in reason - yes
1) The reason field is currently the policy_id only. Is it worthwhile to have a description field alongside the reason field?
2) What would it take to add the description field? policy_id comes from a cedar::Policy instance, but description is only in cedarling::common::policy_store::PolicyStore.
Description
Ensure that latest requirements are captured, and rust design will meet those requirements.
log schema
document full log schema at https://github.com/JanssenProject/jans/wiki/Cedarling-Nativity-Plan#log-schema
cedar::PartialResponse
for errorsShould this be used to provide more information on requests that were not authorized?
pop_logs
designSay a binding calls
pop_logs
. The binding implementation in Rust calls that on the Cedarling instance. Logs are removed from the Cedarling instance, by thepop_logs
implementation.The log entries are then converted by the binding code to some other representation. But something goes wrong, and the conversion code throws an error. The logs are now lost. This would not be acceptable.
description
field inreason
- yes1)
The reason
field is currently thepolicy_id
only. Is it worthwhile to have adescription
field alongside thereason
field?2) What would it take to add the
description
field?policy_id
comes from acedar::Policy
instance, butdescription
is only incedarling::common::policy_store::PolicyStore
.Prepare
Identified code changes
[ ] update
LogEntry
instantiation incrate::authz::Authz::authorize(..)
to havedescription
fromcedarling::PolicyStore
https://github.com/JanssenProject/jans/issues/10276[ ] task 2 etc
Test cases and code coverage
Document the changes