Custom response codes for tenant-related authorization errors

TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 6 forks source link

Closed byewokko closed 3 weeks ago

byewokko commented 3 weeks ago

When a tenant is requested in scope and the user does not have access to that tenant:

if the user has access to no tenant, the authorization responds with error=no_tenants.
if the user has access to other tenants, the authorization responds with error=tenant_access_denied.

The generic response error=access_denied is still used for denied resource access etc.