Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OPA-01-003: Improve token authentication mode explanation #901

Closed
tsandall opened this issue Aug 23, 2018 · 0 comments
Closed

OPA-01-003: Improve token authentication mode explanation #901

tsandall opened this issue Aug 23, 2018 · 0 comments
Assignees
@tsandall
Labels
docs

Comments

@tsandall
Copy link
Member

The security page describes how to configure authentication and authorization when OPA is running as a daemon.

Currently, if token authentication is enabled, OPA still processes requests that are missing a bearer token. To validate bearer tokens, users must implement an authorization policy.

We should improve the security docs to explain that both authentication and authorization must be used with the token authentication scheme.
@tsandall tsandall added the docs label Aug 23, 2018
@tsandall tsandall changed the title Security documentation should describe token authentication behaviour better OPA-01-005: Improve token authentication mode explanation Aug 30, 2018
@tsandall tsandall changed the title OPA-01-005: Improve token authentication mode explanation OPA-01-003: Improve token authentication mode explanation Aug 30, 2018
@tsandall tsandall self-assigned this Sep 4, 2018
tsandall added a commit to tsandall/opa that referenced this issue Sep 4, 2018
@tsandall
Improve token authentication docs and handler
4d030ef 
With these changes, the identity will be undefined if a token is not
specified. This is less surprising than the empty string that would be
set prior to these changes.

Fixes open-policy-agent#901

Signed-off-by: Torin Sandall <torinsandall@gmail.com>
@tsandall tsandall mentioned this issue Sep 4, 2018
Merged
tsandall added a commit that referenced this issue Sep 4, 2018
@tsandall
Improve token authentication docs and handler
4aa9d71 
With these changes, the identity will be undefined if a token is not
specified. This is less surprising than the empty string that would be
set prior to these changes.

Fixes #901

Signed-off-by: Torin Sandall <torinsandall@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tsandall tsandall

Labels
docs
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@tsandall