pefernan opened a new issue, #1597: URL: https://github.com/apache/incubator-kie-issues/issues/1597
User Tasks endpoints require the `user` & `roles` passed as request params to generate the identity that will be used to operate with the user task. We need to create a new component that will enforce using the Identity present in the application security context instead of creating a new Identity based in the request params. This new component (`IdentityProviderFactory`) can take advantage of `IdentityProvider`, which already provide implementations for both Quarkus & Springboot. This way we can make a generic implementation that won't rely on any specific IDP mechanims, relying always in the system setup. Additionally the component should include an impersonation mechanism to allow users belonging to admin groups, impersonate users to perform administrative tasks. The component `IdentityProviderFactory` should be used in the User Task REST endpoints, requiring changes in the process-codegen templates. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
