apolloconfig/apollo

openapi查询权限

Open

#1,940 opened on Jan 31, 2019

View on GitHubContributor guide
 (4 comments) (0 reactions) (0 assignees)Java (10,177 forks)batch import
area/openapifeature requesthelp wantedkind/question

Repository metrics

Stars
 (29,769 stars)
PR merge metrics
 (Avg merge 4d 13h) (6 merged PRs in 30d)

Description

portal已经对查询权限做了控制，只有项目成员才能查看配置。openapi是否也对查询权限做类似的控制，避免一个token可以查询所有appid的配置？

Contributor guide

Research direction
Implement permission checks for OpenAPI endpoints similar to the portal's project member access control. Investigate the existing portal permission model and the current OpenAPI token handling to add a similar authorization layer for querying configurations.
Tech stack
java
Domain
backendapisecurity
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Java
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65