-
Notifications
You must be signed in to change notification settings - Fork 46
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
JWT based authentication and authorization #77
Comments
Hello @shashwat-egov, Please ensure that the following fields are filled out
You can find here description of what needs to be added in corresponding fields. Here are sample tickets for reference. |
Hey @shashwat-egov Thanks for adding the above details. Can you please re-check the links, since I am getting the issues on it. Thanks! |
@Shruti3004 I have updated the links now. |
Hey, this issue seems interesting to me, I'll start working on it and will be sending a patch pretty soon! |
Interested and will be drafting the application on this issue. |
@shashwat-egov - what is your Discord handle? Can you please join the C4GT Discord server as applicants will have queries that they may raise over there. Thanks |
I have already joined. Here is my discord handle - shashwatmishra#9006 |
Hey, I would like to work on this project and will be giving an abstract on this issue soon. |
Hi!
Without these details, the ticket cannot be listed on the C4GT Community Listing. Important Details - These following details are helpful for contributors to effectively identify and contribute to tickets.
Please update the ticket |
DIGIT is an open source service delivery platform on which several government and private sector organisations build solutions e.g. National Urban Digital Mission leverages DIGIT for National Urban Governance Platform (UPYOG) - 28+ States have signed up to roll out UPYOG to all their urban local bodies. This will help deliver services like Property Tax, Public Grievances, Water Connection, Birth/Death Certificate etc. to all citizens.
DIGIT platform has multiple core microservices, where each microservice provides a specific functionality like authentication, authorisation, encryption, workflow etc. Service delivery applications like property tax, trade license etc. are built on top of this DIGIT platform. They internally call these core microservices to utilise the functionality provided by them. DIGIT uses zuul as the API gateway. All the request coming to the backend server passes through this gateway. It provides a centralised way of authentication and authorisation of API calls. This removes the need for each microservice to implement their own authentication and authorisation mechanism. Currently DIGIT has a stateful authentication mechanism in which the access tokens are generated and stored in Redis database. Whenever authentication request is received by the service, it checks in the Redis DB if the token is available in the Redis database. For any authentication request, a call needs to be made to the authentication server. This will have an impact on the performance and scalability.
JWTs are stateless, meaning that the server doesn't need to store any information about the token itself. This can be an advantage in terms of scalability and performance, as there is no need for the server to maintain any session state for the client. It also provides a decentralized mechanism of authentication and authorization, allowing for the authentication and authorization of requests across different systems and services without requiring a centralized authentication and authorization service.
For further reference to current DIGIT authentication and authorisation service please refer the following documentation:
Authentication
Authorization
Features to be implemented:
by third party applications to using DIGIT authentication and authorisation.
Learning Path:
Product Set Up:
Acceptance Criteria:
The text was updated successfully, but these errors were encountered: