search

spiffe / tornjak

Tornjak is a UI and management layer used for brokering human access to one or more SPIRE deployments
Apache License 2.0
78 stars 41 forks source link

Add configurable authorization logic #435

Closed maia-iyer closed 5 months ago

maia-iyer commented 5 months ago

closes #335 and closes #76

This PR deprecates the AdminViewer authorization option in favor of the configurable RBAC plugin.

It also relaxes one Keycloak-specific detail in the Authenticator "Keycloak" pkg so that it will pass all roles from the bearer token to the Authorization layer.