Skip to content

feat(jans-cedarling): New interface: authorize_unsigned - send Principal as Object v. JWT #11000

@olehbozhok

Description

@olehbozhok

It would be nice to have a way to send the Cedar Principal as a JSON object, similar to how we send the Resource. This would be handy for developers who don't use JWTs for identity. Of course the identity can't be trusted ... it's asserted by the application.

Describe the solution you'd like
We create additional method to execute authorize request with new functionality:
method name authorize_classic - classic means that it is usual authorize method that can be executed using cedar CLI app.

here is example of request (for WASM)

Image

Describe alternatives you've considered

Alternatively, we can extend current structure
https://github.com/JanssenProject/jans/blob/main/jans-cedarling/bindings/cedarling_wasm/example_data.js#L123
with adding key principal

When token key is present we make evaluation using tokens.

If key token absent and principal present. We make evaluation using custom principal.

Additional context
NA

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions