L
L
Larisa .•º2019-09-18 09:07:47
JSON Web Token
Larisa .•º, 2019-09-18 09:07:47

What are the options for storing and checking scope in a service?

I decided to try rest_framework_sso (based on a private and public key), there is an identification service, the client is identified, receives an encrypted access_token, with the private key of the identification service.
When contacting another service (other), it passes this access token, the service (other) decrypts the token with a public key, and receives data and, of course, scope.
It turns out that I have scope stored on the identification service. And in order to check on the other - service that the client can, I have to store the scope on my own. It is possible to somehow avoid this.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question