summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--README.md6
1 files changed, 3 insertions, 3 deletions
diff --git a/README.md b/README.md
index 5b02c0e9..1930095b 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,10 @@
# Spike
-1. Thrift + GRPC
+1. Twirp + GRPC (authz)
1. idp (headless)
* provide a thrift/grpc endpoint that is the equivalent of `Ability.allowed?(subject, permission, resource)`
1. gitlab
-2. OpenID Connect + OAuth
+2. OpenID Connect (authn) + OAuth (authz)
* two services
1. idp (with login pages)
* user
@@ -15,9 +15,9 @@
* project
* OpenID transaction to provide authn information to `gitlab-org/gitlab`
* OAuth token introspection endpoint to provide token permissions
+4. OPA agent style side car using declarative policy
3. API Gateway
* using golang reverse proxy and one of the new policy dsl's
-4. OPA agent style side car using declarative policy
## Identity Provider (SAML IdP)