arkhn / jpaltime

Apache License 2.0
0 stars 0 forks source link

Implement AuthorizationInterceptor to behave like SearchNarrowingInterceptor #9

Closed simonvadee closed 2 years ago

simonvadee commented 3 years ago

Description

SearchNarrowing interceptor only applies to search operations, not GET/POST/PUT/DELETE not custom operations (eg: $regex)

Reproduction

https://demo.arkhn.com/hapi/fhir/Patient/c7d4bc48-3d37-5165-b079-d865ecf3653d lol

Expectation

instance-level operations must behave the same as search operations

Resolution

Implement AuthorizationInterceptor https://hapifhir.io/hapi-fhir/docs/security/authorization_interceptor.html

simonvadee commented 3 years ago

also, adapt configuration to be able to easily disable auth mechanism

simonvadee commented 2 years ago

deprecated