Skip to content

Conversation

@strantalis
Copy link
Member

Proposed Changes

Proto validation is occurring before authentication is happening. This change moves the authn/authz check to the top of the interceptor chain behind cors validation.

Checklist

  • I have added or updated unit tests
  • I have added or updated integration tests (if appropriate)
  • I have added or updated documentation

Testing Instructions

@strantalis strantalis requested a review from a team as a code owner November 27, 2024 03:53
@strantalis strantalis requested a review from a team as a code owner November 27, 2024 16:48
@strantalis strantalis enabled auto-merge November 27, 2024 17:36
@strantalis strantalis added this pull request to the merge queue Dec 2, 2024
Merged via the queue into opentdf:main with commit f9f5a75 Dec 2, 2024
21 checks passed
@strantalis strantalis deleted the fix-interceptor-order branch December 2, 2024 14:56
github-merge-queue bot pushed a commit that referenced this pull request Dec 2, 2024
🤖 I have created a release *beep* *boop*
---


##
[0.4.31](service/v0.4.30...service/v0.4.31)
(2024-12-02)


### Features

* **kas:** collect metrics
([#1702](#1702))
([def28d1](def28d1))
* **policy:** 1500 Attribute create with Values (one RPC Call) should
employ a db transaction
([#1778](#1778))
([90edbde](90edbde))


### Bug Fixes

* **core:** move auth interceptor to top of chain
([#1790](#1790))
([f9f5a75](f9f5a75))
* **policy:** return fqns in list subject mappings
([#1796](#1796))
([c0a9dda](c0a9dda))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: opentdf-automation[bot] <149537512+opentdf-automation[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants