bdf079e6
auth: grant scoped access to anon internal auth
Internal auth is granted access to everything, whereas anonymous internal auth is pretty restricted. This is mostly to avoid accidentally hitting resolvers that require a logged-in user, however. Given that all anon internal use cases are hard-coded and tested, this seems like a pretty low risk. Allowing this will have the huge benefit of making much more information available to anon internal queries, which will unlock removing a bunch of awkward work-arounds we put in place. Note, however, that this is also a work-around. It saves us from adding yet more work-arounds to the GQL schema, and in the meantime a redesign of the schema (especially the directives) is being worked on.
Conrad Hoffmann <ch@bitfehler.net> — 2024-11-21 13:28:58 UTC
Commit bdf079e6a8893909e73c6183c0e8a066ab368e45 —
view raw patch
Parent(s):
b57564ae
| File | Status | + | − |
|---|---|---|---|
auth/middleware.go
|
M | +1 | -3 |