Skip to content
This repository has been archived by the owner on Jan 27, 2021. It is now read-only.

implement middleware to impersonate a user for presigned urls #73

Closed
butonic opened this issue Jul 16, 2020 · 0 comments
Closed

implement middleware to impersonate a user for presigned urls #73

butonic opened this issue Jul 16, 2020 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@butonic
Copy link
Member

butonic commented Jul 16, 2020

clients might be able to create pre signed urls with a random key generated using ocs: owncloud/ocis-ocs#18

the proxy needs to be able to authenticate a request, in a similar fashion as for oc10 owncloud/core#37634

if we talk directly to ocis-store we would bypass ocis-ocs, who is responsible for the data. instead we need to add an rpc call to ocis-ocs to validate the signature of the request.

If done properly this is an independent service, similar to the reva auth basic, aith bearer or auth publictoken auth service instances that are responsible for authenticating requests.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant