New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature: Option to sync roles and authorize merely on principle (non-role cert) #19

Open

scr-oath opened this issue Nov 18, 2024 · 0 comments

scr-oath commented Nov 18, 2024

When there is no proxy between client and server or even if they're in the same cluster, adding an oauth2 token is overkill.

Providing some way to check non-role cert directly would be very helpful for these cases.

The server could potentially configure that authorizer with a particular role, or the authorizer could check all roles that a principle is in.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment