search

squidgetx / arklet

ARK minter, binder, resolver with custom detailing for the Frick Art Museum
MIT License
2 stars 6 forks source link

Review auth model #6

Closed squidgetx closed 1 year ago

squidgetx commented 1 year ago

Looks like right now that keys are associated with NAANs. And that incoming requests must have a key that is correctly associated with the NAAN to be considered an authorized request.

Right now only admin users can create access keys. And you can only create admin users via the command line initialization of the app and then through the Django admin panel UI

squidgetx commented 1 year ago

Does the frick want a separate user model or does it not matter? (ie, are we trying to plug into the frick auth system somehow are are we fine with this separate db floating around?)