s-kostyuk / everpl

The Everthing Platfrom source code
https://everpl.readthedocs.io/
MIT License
0 stars 1 forks source link

Authorization checking interceptor proposal #69

Closed s-kostyuk closed 6 years ago

s-kostyuk commented 6 years ago

An experimental implementation of an authorization-related interceptors.

This implementation is mainly based on two concepts:

Ambient Context is used to provide an access to some contextual information in the system and is implemented by an AuthContext class. This class allows to save an access token of a user which requested some action in the system and read it in the context of user-system interaction session.

Aspect-Oriented Programming approach is based on a work described in #63. An Authorization Aspect will intercept all calls to the methods of an underlying Service and will perform an authorization (permission) checking before each call.

Closes #65