blob: f099eab373119d4e3b6314e0d194bd1ebca1dcc9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
# Spike
1. Twirp + GRPC (authz)
* idp (headless): provide a thrift/grpc endpoint that is the equivalent of `Ability.allowed?(subject, permission, resource)`
* gitlab
2. OpenID Connect (authn) + OAuth (authz)
1. idp (with login pages)
1. gitlab
3. API Gateway: using golang reverse proxy and one of the new policy dsl's
4. OPA agent style side car process using declarative policy
## Identity Provider (SAML IdP)
This is a tiny SAML Identity Provider for testing out interactions with
a SAML Service Provider
1. Start the server:
$ ruby ./bin/idp
1. Use `http://localhost:8282/metadata.xml` as your SAML IdP Metadata url.
## Service Provider (SAML SP)
This is a tiny SAML Service Provider for testing out interactions with a SAML Identity Provider (IdP)
1. Start the server:
$ ruby ./bin/sp
1. Use `http://localhost:8283/metadata.xml` as your SAML SP Metadata url.
|
