unkin/artifactapi
2
0
Fork 0
Code Issues 5 Pull Requests 2 Actions Packages Projects Releases 1 Wiki Activity

docs: authentication & authorization system design (epic #79) #95

Open
unkinben wants to merge 1 commits from benvin/auth-design-doc into master
pull from: benvin/auth-design-doc
merge into: unkin:master
Conversation 0 Commits 1 Files Changed 1
+185

1 Commits

Author SHA1 Message Date
unkinben 67cedf9bba docs: design for authentication & authorization system
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/test Pipeline was successful
Details 
Add docs/auth.md describing the default-open auth/authz design: service
account and user principals, hashed bearer tokens, a path+capability ACL
model (read/write/delete/create), an observe-only enforcement middleware
gated by AUTH_ENFORCE, Vault mint/revoke integration with a companion
vault-plugin-secrets-artifactapi engine, OIDC/LDAP user login, and a
phased delivery plan.

Refs #79
 2026-07-02 00:51:51 +10:00