paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 34 Packages Projects Releases Wiki Activity

Merge pull request #8551 from backstage/authz-batching

Browse Source 
permissions: more efficient integration between permission backend and plugin backends
This commit is contained in:
Fredrik Adelöw
2022-01-13 15:17:29 +01:00
committed by GitHub
parent 653152c7ff ba2dbe47d7
commit 182e573def
15 changed files with 1186 additions and 298 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/shiny-bugs-beam.md
+11
View File
@@ -0,0 +1,11 @@
---
'@backstage/plugin-permission-backend': minor
'@backstage/plugin-permission-node': minor
---
Optimizations to the integration between the permission backend and plugin-backends using createPermissionIntegrationRouter:
- The permission backend already supported batched requests to authorize, but would make calls to plugin backend to apply conditions serially. Now, after applying the policy for each authorization request, the permission backend makes a single batched /apply-conditions request to each plugin backend referenced in policy decisions.
- The `getResource` method accepted by `createPermissionIntegrationRouter` has been replaced with `getResources`, to allow consumers to make batch requests to upstream data stores. When /apply-conditions is called with a batch of requests, all required resources are requested in a single invocation of `getResources`.
Plugin owners consuming `createPermissionIntegrationRouter` should replace the `getResource` method in the options with a `getResources` method, accepting an array of resourceRefs, and returning an array of the corresponding resources.