Skip to content

Feature/422 wire new authentication to soarca api - #425

Open
MaartendeKruijf wants to merge 7 commits into
developmentfrom
feature/422-wire-new-authentication-to-soarca-api
Open

MaartendeKruijf wants to merge 7 commits into
developmentfrom
feature/422-wire-new-authentication-to-soarca-api

Conversation

@MaartendeKruijf

Copy link
Copy Markdown
Collaborator

No description provided.

@MaartendeKruijf
MaartendeKruijf force-pushed the feature/422-wire-new-authentication-to-soarca-api branch from 5291511 to 3f9174f Compare October 14, 2026 15:48
Comment thread internal/config/config.go Outdated
ClientId string `env:"OIDC_CLIENT_ID"`
SkipTlsVerify bool `env:"OIDC_SKIP_TLS_VERIFY" envDefault:"false"`
// Members of AUTH_GROUP get every permission, as they did with gauth.
// Members of AUTH_GROUP get every permission.

@Paul2803k Paul2803k Oct 15, 2026 •

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nitpick: instead of AUTH_GROUP wouldnt be something like ADMIN_AUTH_GROUP or ADMIN_GROUP be more obvious?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah I think that is a good adaption I will fix that

Comment thread pkg/api/permissions.go
// the UI's Authorize button adds.
route(http.MethodGet, "/swagger/*any"): {Public: true},

route(http.MethodGet, "/status/"): {Permission: roles.PlaybookRead},

@Paul2803k Paul2803k Oct 15, 2026 •

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: should this behind PlaybookRead permissions? Not public?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch I think this even should get it's own permission with StatusRead or Reader

Paul2803k
Paul2803k previously approved these changes Oct 15, 2026

This branch was successfully deployed

1 active (outdated) deployment
development-pages — 52915115 Deployed Oct 14, 2026 by MaartendeKruijf via deploy-to-pages #963
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Wire new authentication to SOARCA api

2 participants