You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 17, 2024. It is now read-only.
Is your feature request related to a problem? Please describe.
In a production setting, TES and DRS service instances are very likely going to require specific permissions for the services to be used. Apart from security, services may make use of user information to provide specific offers/rates etc. that, in the future, TEStribute could make use of. In accordance with discussions withing ELIXIR and GA4GH, the GA4GH Cloud API services are likely going to use/support token-based authorization via JSON Web Tokens (JWT). TEStribute should thus support the parsing and validation of JWTs and attach validated tokens to its service calls to DRS and TES instances.
Describe the solution you'd like
A JWT parser and validator (either by UserInfo endpoint or via the identity provider's public key sets) is already implemented, and its use can be configured via the app config. If required, an unauthorized call to the TEStribute API service will result in a 401/Unauthorized response. If validated, JWTs should be attached to service calls to DRS and TES (consider #39). Moreover, a corresponding parameter should be available in the CLI (#30).
Describe alternatives you've considered
Currently not considered.
Additional context
N/A
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
In a production setting, TES and DRS service instances are very likely going to require specific permissions for the services to be used. Apart from security, services may make use of user information to provide specific offers/rates etc. that, in the future,
TEStribute
could make use of. In accordance with discussions withing ELIXIR and GA4GH, the GA4GH Cloud API services are likely going to use/support token-based authorization via JSON Web Tokens (JWT).TEStribute
should thus support the parsing and validation of JWTs and attach validated tokens to its service calls to DRS and TES instances.Describe the solution you'd like
A JWT parser and validator (either by UserInfo endpoint or via the identity provider's public key sets) is already implemented, and its use can be configured via the app config. If required, an unauthorized call to the
TEStribute
API service will result in a401/Unauthorized
response. If validated, JWTs should be attached to service calls to DRS and TES (consider #39). Moreover, a corresponding parameter should be available in the CLI (#30).Describe alternatives you've considered
Currently not considered.
Additional context
N/A
The text was updated successfully, but these errors were encountered: