sso icon indicating copy to clipboard operation
sso copied to clipboard

*: create set of enrichment APIs for sso to proxy to providers

Open shrayolacrayon opened this issue 6 years ago • 1 comments

Some upstreams need additional information about users from the google apis that require having an access token. Rather than passing the access token in a header, we can create a set of enrichment APIs that proxy requests to the google API and retrieve common user information. Upstreams would hit an endpoint in either sso-proxy or sso-auth to make those requests.

shrayolacrayon avatar Nov 09 '18 22:11 shrayolacrayon

This would allow us to deprecate using the abstraction in #109 and remove the potential of upstreams accidentally creating security vulnerability.

shrayolacrayon avatar Nov 09 '18 22:11 shrayolacrayon