microsoft / LSKV

A Ledger-backed Secure Key-Value store (LSKV), built on the Confidential Consortium Framework (CCF)
https://microsoft.github.io/CCF
MIT License
34 stars 6 forks source link

Authenticate users #168

Closed jeffa5 closed 1 year ago

jeffa5 commented 1 year ago

Is your feature request related to a problem? Please describe.

Users are not authenticated when interacting with the datastore. We should limit who can make changes.

Describe the solution you'd like

Use https://github.com/microsoft/CCF/blob/064b4f3bd0d3e47d844fbf0aab8f89bbdd3fe474/include/ccf/common_auth_policies.h#L25-L28 to limit who can make changes (users can be determined through CCF governance).

Describe alternatives you've considered

Custom tokens but this bypasses the governance.

Additional context

Etcd has users and authentication of endpoints in relation to those so we'll just be doing it differently.