feat(jans-cedarling): implement toggle for Workload and User principals #10424
Labels
comp-jans-cedarling
Touching folder /jans-cedarling
kind-feature
Issue or PR is a new feature request
Milestone
Description
We need to implement the following bootstrap configs:
CEDARLING_USER_AUTHZ
: Enables Cedar engine authorization for a User principal.CEDARLING_WORKLOAD_AUTHZ
: Enables Cedar engine authorization is queried for a Workload principal.Development target issue
target issue: refactor(jans-cedarling): make all tokens optional when calling Cedarling::authorize #10408
To be able to make tokens optional when calling Cedarling::authorize, creating user and workload entities would also need to be optional since it's possible to create a Workload entity without creating a User entity depending on the given tokens and vice-versa.
To control if an Entity is required or not, the following bootstrap properties will be implemented
CEDARLING_USER_AUTHZ
: Enables Cedar engine authorization for a User principal.CEDARLING_WORKLOAD_AUTHZ
: Enables Cedar engine authorization is queried for a Workload principal.Prepare
Identified code changes
CEDARLING_USER_AUTHZ
bootstrap configCEDARLING_WORKLOAD_AUTHZ
bootstrap configTest cases and code coverage
Document the changes
The text was updated successfully, but these errors were encountered: