http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13799

--- Comment #108 from Olli-Antti Kivilahti <[email protected]> ---
Created attachment 41272
  -->
http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=41272&action=edit
Bug 13799: 5. API authentication system - Swagtenticator authentication

Reads the Swagger2 definitions and defines the API routes and controllers
for Mojolicious.

Authentiates the API consumer using Koha::Auth::Challenge::RESTV1
with all the necessary details inferred from Swagger2, like permissions.

Validates all input to match the Swagger2 definition.

Authentication is based on the permissions defined in the Swagger2 definition.
Add x-koha-permission to the Operation Object to define needed Koha permissions
to access the resource.

Eg.
  "/borrowers/{borrowernumber}": {
    "get": {
      "x-mojo-controller": "Koha::REST::V1::Borrowers",
      "x-koha-permission": {
        "borrowers": "*"
      },
      "operationId": "getBorrower",
      "tags": ["borrowers"],

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to