epam / cloud-pipeline

Cloud agnostic genomics analysis, scientific computation and storage platform
https://cloud-pipeline.com
Apache License 2.0
144 stars 58 forks source link

Allow access to swagger endpoint only for specific roles #3554

Closed SilinPavel closed 3 weeks ago

SilinPavel commented 3 weeks ago

New application property api.security.swagger.access.roles (comma separated list of groups and roles) is available for api-srv server. During deployment it can be configured with CP_API_SECURITY_SWAGGER_ACCESS_ROLES env variable. Only roles defined in this property will have access to the swagger endpoint (default value: ROLE_ADMIN,ROLE_USER which is basically any authorized user)

example:

api.security.swagger.access.roles=ROLE_ADMIN,ROLE_<GROUP-NAME>,ROLE_ADVANCED_USER