Comments (3)
Thank you for reporting, @abratv. I agree this is an issue and I'm looking into it. Few questions:
- What identity provider are you using, EntraID/Azure AD?
- Out of curiosity, do you use the scope claims (
scp
) in any DAB Database authorization policy rules?
from data-api-builder.
- It's our internal open id provider
Like what I said in another issue, I'm aware officially its Az AD but there is no "technical" limitation other than "business decision" here, Msft promote this as open source and can run it on premise so... (does not mean i want to fork it :P) - No, normally scope claim is used to authorize the api endpoint, say "api:person:read", then this indicate the access token can only be used to reach GET /person, it does not even hit the database yet
Having saying that, because DAB simply throw all claims to sp_sessions_context? (there was discussion to configure this instead of using all claims but it does not made it?), it should be up to us to decide which claims to be used in session context
DAB should simply give us "example/best practice" and not limit the possibility of using DAB
from data-api-builder.
@seantleonard i saw your PR, seems that means we can't use any stored claims with JSON array, why not simply using "scope_0", "scope_1",... but again this should be configurable
from data-api-builder.
Related Issues (20)
- Nested Create: Integration/Unit testing HOT 1
- [Bug]: Parse sp parameter default value from runtime config when target type is UUID.
- [Bug]: hasNextPage is incorrect at times HOT 2
- [Bug]: Inconsistency with endCursor HOT 2
- Add validation for conflicting names with fields in linking table to dab validate
- 0.11-rc2 HOT 1
- [Bug]: `dab validate` returns an Unhandled Exception if a table definition is not inferred
- [Bug]: `dab validate` getting exception due to datasourceName mismatch
- [Bug]: Console logged "error" when DBtype is Cosmos and OpenAPI service fails to generate doc
- [Bug]: ConnectionString parsing for AppInsights - DAB CLI HOT 1
- [Enhancement]: Improved DAB CLI appinsights config usage
- Improve documentation for deploying DAB using Azure Container Apps via portal HOT 4
- Provide recommended hosting options based on workload
- [Bug]: array "contains" not supported when using filter HOT 1
- [Bug]: `numeric` data type not supported as a parameter for a stored procedure
- [Bug]: Static Web Apps + Data API Builder JWT Authentication HOT 8
- [Bug]: Unable to hot reload runtime section since file is being used by another process HOT 3
- [Feature:] Support additional `UUID` format specifiers
- [Bug]: Possible issue with passing date values in env file to stored procedure
- Implement Generic GetOrSetAsync caching method for SQL
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from data-api-builder.