Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: /warden/allowed do not fully specify security parameters #565

Closed
bhearsum opened this issue Jul 28, 2017 · 4 comments
Closed

docs: /warden/allowed do not fully specify security parameters #565

bhearsum opened this issue Jul 28, 2017 · 4 comments
Assignees
Labels
upstream Issue is caused by an upstream dependency.
Milestone

Comments

@bhearsum
Copy link

On http://docs.hydra13.apiary.io/#reference/warden/wardenallowed/check-if-a-subject-is-allowed-to-do-something the text description for the endpoint says:

Checks if an arbitrary subject is allowed to perform an action on a resource. This endpoint requires a subject, a resource name, an action name and a context.If the subject is not allowed to perform the action on the resource, this endpoint returns a 200 response with

From this, I can see that the endpoint must be provided the subject, resource, action, and context. However, it's not clear what these parameters should be called. Some of the examples use "action" and "subject", but there is nothing that shows exactly what all of the parameters are named, and what they look like.

@aeneasr aeneasr added docs upstream Issue is caused by an upstream dependency. labels Jul 29, 2017
@aeneasr aeneasr self-assigned this Jul 29, 2017
@aeneasr
Copy link
Member

aeneasr commented Jul 29, 2017

Unfortunately, this is due to bad design choices by apiary, oauth2 is properly referenced as you can see in the screenshot:

bildschirmfoto 2017-07-29 um 10 07 05

bildschirmfoto 2017-07-29 um 10 08 44

I will try to follow up with apiary on this, which might take some time.

Also, for some reason, it says implicit OAuth2 which isn't correct.

@bhearsum
Copy link
Author

Hm, I'm not sure I understand what you mean. Even if I click "oauth2" I don't see any thing about subject, action, etc. It's also not in the Body section of the console, eg: https://screenshots.firefox.com/mAe0p0DKGJeqzZcA/docs.hydra13.apiary.io.

@aeneasr
Copy link
Member

aeneasr commented Jul 31, 2017 via email

@aeneasr aeneasr changed the title Docs for /warden/allowed do not fully specify parameters docs: /warden/allowed do not fully specify security parameters Sep 15, 2017
@aeneasr aeneasr added this to the unplanned milestone Jan 15, 2018
@aeneasr
Copy link
Member

aeneasr commented Apr 29, 2018

this has now moved and is no longer an issue

@aeneasr aeneasr closed this as completed Apr 29, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
upstream Issue is caused by an upstream dependency.
Projects
None yet
Development

No branches or pull requests

2 participants