http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13920

Julian Maurice <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #41166|0                           |1
        is obsolete|                            |

--- Comment #27 from Julian Maurice <[email protected]> ---
Created attachment 42042
  -->
http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=42042&action=edit
Bug 13920: API authentication system - Swagtenticator authentication

Reads the Swagger2 definitions and defines the API routes and controllers
for Mojolicious.

Authentiates the API consumer using Koha::Auth::Challenge::RESTV1
with all the necessary details inferred from Swagger2, like permissions.

Validates all input to match the Swagger2 definition.

Authentication is based on the permissions defined in the Swagger2
definition.
Add x-koha-permission to the Operation Object to define needed Koha
permissions to access the resource.

Eg.
  "/borrowers/{borrowernumber}": {
    "get": {
      "x-mojo-controller": "Koha::REST::V1::Borrowers",
      "x-koha-permission": {
        "borrowers": "*"
      },
      "operationId": "getBorrower",
      "tags": ["borrowers"],

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to