Answer the question
In order to leave comments, you need to log in
What are the options for storing and checking scope in a service?
I decided to try rest_framework_sso (based on a private and public key), there is an identification service, the client is identified, receives an encrypted access_token, with the private key of the identification service.
When contacting another service (other), it passes this access token, the service (other) decrypts the token with a public key, and receives data and, of course, scope.
It turns out that I have scope stored on the identification service. And in order to check on the other - service that the client can, I have to store the scope on my own. It is possible to somehow avoid this.
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question