Implement Access Enforcement point in CleverMicro #13

New Issue

2025-05-01T08:26:20Z

stanislav.hejny commented

2025-05-01 08:26:20 +00:00

Ref epic: #103

CleverMicro shall implement an Access Enforcement point, where it will ensure that:

every request is authenticated (it will rely on valid JWT token being present in the request)
that user / client invoking the request is authorized to access the resource identified by the request's URL

1.1 - implement JWT verification logic - token validity and subject match
1.2 - implement /login endpoint allowing client to obtain valid JWT token after providing valid credentials
1.3 - implement a microservice that will allow permission management

2.1 design the user permissions system
2.2 design the user permission actual implementation (choose storage solution, schema design, entity representation, and document the design details)
2.3 implement the actual user permission, and define/implement access / CRUD queries that will allow request authorisation and permission management

Ref epic: [#103](https://git.cleverthis.com/clevermicro/clevermicro/issues/103) CleverMicro shall implement an Access Enforcement point, where it will ensure that: 1. every request is authenticated (it will rely on valid JWT token being present in the request) 2. that user / client invoking the request is authorized to access the resource identified by the request's URL 1.1 - implement JWT verification logic - token validity and subject match 1.2 - implement /login endpoint allowing client to obtain valid JWT token after providing valid credentials 1.3 - implement a microservice that will allow permission management 2.1 design the user permissions system 2.2 design the user permission actual implementation (choose storage solution, schema design, entity representation, and document the design details) 2.3 implement the actual user permission, and define/implement access / CRUD queries that will allow request authorisation and permission management

stanislav.hejny added the

labels 2025-05-01 08:41:23 +00:00

stanislav.hejny referenced this issue

2025-05-01 08:42:34 +00:00

Create Auth Microservice for Keycloak Token Operations #1

stanislav.hejny referenced this issue

2025-05-01 08:43:01 +00:00

Design Permission System for Endpoint Access Control #2