search

motiv-labs / janus

An API Gateway written in Go
https://hellofresh.gitbooks.io/janus
MIT License
2.78k stars 318 forks source link

OAuth2 Scope and API Client Management #358

Open rlvillacarlos opened 5 years ago

rlvillacarlos commented 5 years ago

Hi, I am trying janus for the first time. I am currently assessing different API gateway solutions that is simple to configure and has support for integrating a third party OAuth2 server. I have some concerns about the implementation of OAuth2 configuration.

First, I was looking at the documentation on the configuration of an OAuth2 server but there is no information as to how to specify the scope for an endpoint. Could it be the allowed_access_types configuration? I am not quite sure what this configuration does.

Secondly, if it is possible to specify scopes for an endpoint, is it possible to use the same OAuth2 server config for two endpoints with different scope declarations or should I create two config for the same OAuth2 server with different scope declarations?

Lastly, it seems like configuring the clients of an OAuth2 server is not separate from the OAuth2 server config. If I would want to dynamically add/remove clients, is there a way to modify an existing OAuth2 configuration and how would can I do it with respect to my second question earlier?

Hope to hear from you soon.