You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2023/01/06 14:26:53 UTC
[GitHub] [apisix] tellim opened a new issue, #8629: feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins
tellim opened a new issue, #8629:
URL: https://github.com/apache/apisix/issues/8629
### Description
A typical use case would be the oidc plugin to work with the limit-* plugins.
A token field extractor would allow to retrieve desired user information from access token e.g. access_token.email or access_token.username and that information could be used in variables or variable combinations to create configs for these plugins.
Figures could also be retrieved from the access token when varying oauth2 scopes allowing to setup customed user limitations on the IDP side.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #8629:
URL: https://github.com/apache/apisix/issues/8629#issuecomment-2480501176
This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #8629:
URL: https://github.com/apache/apisix/issues/8629#issuecomment-2451629074
This issue has been marked as stale due to 350 days of inactivity. It will be closed in 2 weeks if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #8629: feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #8629:
URL: https://github.com/apache/apisix/issues/8629#issuecomment-1375324241
> @tokers not really though I spoke of authentication plugins as a whole, so maybe look into providing a common authenticated identity interface that each auth plugin could implement.
Fair enough. A common mechanism is good, and then we can design the passed data for each authentication plugin.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] spacewander commented on issue #8629: feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins
Posted by GitBox <gi...@apache.org>.
spacewander commented on issue #8629:
URL: https://github.com/apache/apisix/issues/8629#issuecomment-1375134122
We already include the ID token & userinfo in the request: https://github.com/apache/apisix/blob/37f6f81a1a9c18895db1c61cca62785980fe9d10/apisix/plugins/openid-connect.lua#L353
So now what we need is to have a mechanism to decode them and fetch the sub-field in them.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #8629: feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #8629:
URL: https://github.com/apache/apisix/issues/8629#issuecomment-1375310051
Besides the OIDC, do you have any other scenarios? @tellim
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #8629: feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins
URL: https://github.com/apache/apisix/issues/8629
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tellim commented on issue #8629: feat: As a user, I want to use authentication plugins in conjuction with other plugins, so that user identity would be available as a variable for other plugins
Posted by GitBox <gi...@apache.org>.
tellim commented on issue #8629:
URL: https://github.com/apache/apisix/issues/8629#issuecomment-1375321681
@tokers not really though I spoke of authentication plugins as whole, so maybe look into providing a common authenticated identity interface that each auth plugin could implement.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org