Skip to content

federated-authorization: explain why identities bind to a single user - #54

Open
sohanmaheshwar wants to merge 1 commit into
mainfrom
federated-authz/schema-design-note
Open

sohanmaheshwar wants to merge 1 commit into
mainfrom
federated-authz/schema-design-note

Conversation

@sohanmaheshwar

Copy link
Copy Markdown
Contributor

Adds a short note under the schema in the README, following review feedback:

  • Why every grant targets the internal user rather than raw IdP subjects
  • The user#identity alternative (check with any IdP ID directly), and its trade-offs: internal-ID checks need a self relation, and writes still need the internal user
  • That consolidating on the internal ID is the long-term goal, after which the login lookup goes away

README only; no code or schema changes.

Adds a short note after the schema explaining the design choice, the
user#identity alternative and its trade-offs, and that consolidating on
the internal user ID is the long-term goal.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant