Skip to content

feat: permissions mapped to roles #415

Closed

Description

@Bccorb

Why

Roles are free-form strings with no permissions behind them, so every app reinvents authorization.

What

  • Define permissions; map roles to permissions
  • Permissions in the access token (or resolvable through an endpoint when large)
  • Admin API for roles and permissions, audited

Done when

Apps can authorize on permissions issued by Seamless Auth.

Activity

  1. added this to the v0.22 milestone on Oct 13, 2026
  2. added
    P1Security work outside the FIDO2 track
    secureServes the most-secure promise
    v0.22Targets the v0.22 release
    on Oct 13, 2026
  3. added theissue type on Oct 13, 2026
  4. added
    v0.23Release v0.23: roles, permissions and hooks
    and removed
    v0.22Targets the v0.22 release
    on Nov 2, 2026
  5. added a commit that references this issue on Nov 6, 2026
    da66738
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    P1Security work outside the FIDO2 tracksecureServes the most-secure promisev0.23Release v0.23: roles, permissions and hooks

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions