TanmoySG / wunder-identity-provider

ID Provider for Wunder Platform. Authentication & Authorization Server for all wunder products
3 stars 0 forks source link

Identifying and Developing an Access Token Framework #8

Closed TanmoySG closed 2 years ago

TanmoySG commented 2 years ago

In the current wunderDB access-token system, we are using only one access token for all access - Admin Access, Service Access and App/Third-Party Client Access. This poses a serious fault that doesn't allow different levels of separation of access for different actions. The goal is to prepare a Multi-Token Multi-Level Access Token Framework for accessing different sections and actions in wPlat.

Refer to Notes and Observations in The Curious case of Login and the various Tokens.

TanmoySG commented 2 years ago

Access-Types-Logic

Read for Rough Solution and Architecture Developed (Yet to be structured and Documented in README, will be updated in the Comments as soon as done)