Open Kingmidas74 opened 2 years ago
@smolchanovsky
Sorry for the late reply I don't understand your suggestion. I'v used OPA like a proxy for backend API and I don't imagine how it can be applied to nclient. Could you describe concept with more details?
Can we think about some extension for RBAC on client side based on https://www.openpolicyagent.org/docs/latest/http-api-authorization/ ?
I suppose it will reduce http request and save net traffic.
Concept: User will create nclient instance with some rego-configuration (maybe loaded from third-party source). Before request execution nclient will check permission for current uri and credentials.