search

dwyl / smart-home-auth-server

The authorisation server for dwyl/smart-home-security-system
GNU General Public License v2.0
5 stars 1 forks source link

Should we update roles on every external access? #28

Open th0mas opened 4 years ago

th0mas commented 4 years ago

@nelsonic, now that dwyl/auth#121 is fixed we can now check roles with the central server easily.

I think we should do this more secure but longer check on external access only, and rely on our local cache for internal doors (which is much quicker).

I'll build in a "failsafe" option so if the external server/internet goes down the system will revert back to its internal cache.

How does this sound to you?

nelsonic commented 4 years ago

@th0mas sounds good. 👍 The the endpoint is implemented from the auth side but not yet in rbac (which I think makes sense given that it already has the necessary dependencies) Please let me know if you need anything else to make progress on this.