Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide quarkus-based implementation of AccessPathChecker #501

Open
mcollovati opened this issue Dec 23, 2023 · 0 comments
Open

Provide quarkus-based implementation of AccessPathChecker #501

mcollovati opened this issue Dec 23, 2023 · 0 comments
Labels
enhancement New feature or request security

Comments

@mcollovati
Copy link
Owner

AccessPathChecker allows NavigationAccessControl to check if a Flow view is protected by a security mechanism based on URLs.

An implementation for Quarkus should probably inspect AuthRuntimeConfig.permissions and apply rules defined in PolicyMappingConfig.

Another way could be to use the PathMatchingHttpSecurityPolicy bean exposed by quarkus-vertx-http, either by calling checkPermission on it or on the list of policy returned by findPermissionCheckers.
Both methods require a mock implementation of RoutingContext (could a JDK proxy be enough?)

@mcollovati mcollovati added enhancement New feature or request security labels Dec 23, 2023
@mcollovati mcollovati moved this from 🆕 New to 📋 Backlog in quarkus-hilla backlog Dec 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request security
Projects
Status: 📋 Backlog
Development

No branches or pull requests

1 participant