New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OAuth2.0 Authorization 管理画面ログイン #5

Closed

kiy0taka opened this issue Jul 1, 2020 · 2 comments · Fixed by #15

Assignees

Labels

authorization security

Milestone

Contributor

kiy0taka commented Jul 1, 2020 •

edited by nanasess

Loading

No description provided.

kiy0taka added authorization security labels

okazy assigned nanasess

Collaborator

nanasess commented Jul 1, 2020

see API: GraphQLとOAuth2.0の実装 ec-cube#4474 (comment)
上記実装を精査して、必要に応じて見直す
参考 http://openid-foundation-japan.github.io/openid-connect-core-1_0.ja.html#AuthRequest

Collaborator

nanasess commented Jul 2, 2020 •

edited

Loading

~~UserInterface(Member) と client_id の紐づけが必要。~~ システム管理者のみ AuthN ができれば良い
Eccube\EventListener\AuthorizationRequestResolveListener で、諸々の対策できそう

kiy0taka added this to the 1.0 milestone

nanasess mentioned this issue

認可対象をシステム管理者に限定する #15

Merged

kiy0taka closed this as completed in #15

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment