spiffyjr / spiffy-authorize Goto Github PK
View Code? Open in Web Editor NEWSpiffyAuthorize is an authorization module for SpiffyCms (but can be used standalone).
SpiffyAuthorize is an authorization module for SpiffyCms (but can be used standalone).
Hi,
I just want to share some thoughts about SpiffyAuthorize, which indeed looks very promising.
As I said to @spiffyjr on IRC, we now have three auth modules: ZfcRbac which is targetted to Rbac (and that is a little broken in some edges because iirc at the very beginning it was untetested, so a lot of features are still left not tested), BjyAuthorize for ACL, and this new SpiffyAuthorize that try to unify both.
As I suggested, I think it would be a good idea once this module is stabilized to deprecate ZfcRbac use. It's just going to be a whole mess if you, spiffy, don't maintain ZfcRbac anymore while you're still the owner and author.
On the other hand, I see some problems in this module and I'd like to have your feeling on this:
So that lead to my question: shouldn't we, instead, remove SpiffyAuthorize and move it to a refactor branch of ZfcRbac, and ONLY supporting RBAC, as before.
This would make architecture simpler, less maintenance and more contributions as people won't have the feeling that we "abandon" ZfcRbac, but instead made a new version.
What do you think?
Hi,
Currently (as it was the case in ZfcRbac), SpiffyAuthorize returns a 403 error when a user is not authorized.
Here is an idea for allowing a redirect strategy:
The UnauthorizedRedirectStrategy would have the following options:
What do you think @spiffyjr ?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.