Add documentation to API spec regarding limits to scope requests

nasa / utm-apis

The collection of APIs for NASA's UTM project in the form of OpenAPI documents.

55 stars 35 forks source link

Add documentation to API spec regarding limits to scope requests #174

Closed nasajoey closed 4 years ago

nasajoey commented 4 years ago

Following #173 we need to specify which groups of scopes are valid to request. We wish to limit the groups to only those which are valid to request to maintain least privilege.

Will have to obtain the groupings from team. I think there is only one valid pairing (RID regular and RID enhanced), otherwise all requests should be single scoped.

issmith1 commented 4 years ago

Spec changed- service implementation via UAMX3-456

issmith1 commented 4 years ago

https://github.com/nasa/utm-apis/blob/4260051071f0f7b5d8dfc6bd3d4a0b30c869fdfb/fimsauthz-api/fims-authz.yaml#L70