reactioncommerce / federated-gateway

An access aware federated GraphQL API gateway for the Reaction Commerce ecosystem

Apache License 2.0

6 stars 3 forks source link

Establish permission policies #5

Closed kkuzemka closed 4 years ago

kkuzemka commented 4 years ago

Establish Permission Policies

The Federated Gateway service will need to register permission policies with the Authorization service for access control. Service Policy Registration Docs

User Stories

As an operator I want to only control access to the Gateway service.

Deliverable

A policies.json with service policies (see Pricing Engine Policies).
A policies.graphql schema for the upsertPolicies mutation.
A register-policies bash script that calls the upsertPolicies mutation with the defined service policies.

Acceptance Criteria

Easily register service policies via a terminal command bin/register-policies.

Considerations

Federated Gateway needs to have permission to check policies.