mirror of
https://github.com/digital-asset/daml.git
synced 2024-11-10 10:46:11 +03:00
4b8b67a1b5
* Upgrade Scalatest to v3.2.9. Because of some coupling we also have to upgrade Scalaz to the latest v7.2 point release, v7.2.33. The Scalatest changes are quite involved because the JAR has been broken up into several smaller JARs. Because Bazel expects us to specify all dependencies and doesn't allow transitive dependencies to be used directly, this means that we need to specify the explicit Scalatest components that we use. As you can imagine, this results in quite a big set of changes. They are, however, constrained to dependency management; all the code remains the same. CHANGELOG_BEGIN CHANGELOG_END * http-json-oracle: Fix a Scalatest dependency. * ledger-api-client: Fix a Scalatest dependency. |
||
|---|---|---|
| .. | ||
| src | ||
| BUILD.bazel | ||
| README.md | ||
Ledger API authorization
General authorization in gRPC
An Interceptor reads HTTP headers, and stores relevant information (e.g., claims) in a Context.
GRPC services read the stored data from the Context in order to validate the requests.
Authorization in the ledger API
The AuthService defines an interface for decoding HTTP headers into Claims.
The ledger API server takes an AuthService implementation as an argument.
The ledger API server uses a call interceptor and the given AuthService implementation to to store decoded Claims in the gRPC Context.
All ledger API services use the Claims to validate their requests.