Details
-
Umbrella
-
Status: Closed (View Workflow)
-
P3
-
Resolution: Done
-
None
-
None
-
-
Folijet
Description
This component should cover all functionality related to security.
As described in the RFC (https://github.com/folio-org/rfcs/blob/12c2ffc0da5768ec1e183ba124a83dc75a1662d1/text/0000-pub-sub.md) there will be a dedicated user for each tenant which will be used to deal with subscribers (HTTP calls to deliver events).
The regulation for creating such a user as well as all configuration issues related to storing user credentials are in scope of this feature.
Responsibilities
- retrieving stored user credentials to obtain a JWT token for each tenant either during module startup or on the first demand.
- addressing all issues related to permissions in context of pub-sub
- providing API to get actual JWT token by other pub-sub services. this functionality must be private for pub-sub module.
TestRail: Results
Attachments
Issue Links
- defines
-
UXPROD-2196 NFR: PubSub enhancements (BE)
-
- Open
-
- is defined by
-
MODPUBSUB-51 Create Security Service
-
- Closed
-
-
MODPUBSUB-54 SPIKE: Design Security for pub-sub
-
- Closed
-
-
MODPUBSUB-57 Create pub-sub user
-
- Closed
-
-
MODPUBSUB-78 Insecure use of password for pub-sub user
-
- Closed
-
-
MODPUBSUB-178 Add security properties to mod-pubsub kafka configuration
-
- Closed
-