ory / fosite

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.
https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=fosite
Apache License 2.0
2.33k stars 367 forks source link

feat: add ResourceAccessScopeStrategy #806

Open zoop-btc opened 7 months ago

zoop-btc commented 7 months ago

Related to this hydra issue.

This scope strategy splits a scope into resources delimited with :. Each resource can have dynamic values if it has the suffix -*. The last resource can specify a verb delimited with ..

The hierarchy of the matcher and scope resources needs to be identical.

Examples:

Open questions: Should I make the resource/verb delimiter configurable? What about allowing dynamic resources?

CLAassistant commented 7 months ago

CLA assistant check
All committers have signed the CLA.

medhost-chara commented 6 months ago

Before I open a separate discussion, I wanted to check if there are plans for defining a scope matching strategy for use in ORY Hydra. As part of the Smart App Launch US HTI-1 Guidelines to support Smart App Launch 2.0.0 - the scope formats were updated to the following format: https://hl7.org/fhir/smart-app-launch/STU2/scopes-and-launch-context.html#scopes-for-requesting-clinical-data

patient.read > patient.r or patient.rs