search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
12.6k stars 847 forks source link

App password with limited scope #6794

Open Aljutor opened 1 year ago

Aljutor commented 1 year ago

Is your feature request related to a problem? Please describe. Currently app passwords grant full permission set same as user have

Describe the solution you'd like It would be nice to have option to limit app passwords to a sub set of permissions user have, for example limit to a distinct group.

Describe alternatives you've considered Or we can have special app passwords with direct user/group - app binging.

Additional context I am expecting that App Password can be limited to an App, it seems generally a good idea to limit attack surface.

BeryJu commented 1 month ago

With our current permission system we can't really depict that. The current recommendation is to create a separate user with the required permissions and create a token/app password for that user