orchestracities/auth-management-api repository overview

⁠Access Control Policy Management

This API provides functionalities to manage Role Base Access Control policies. THe policy management part is complemented by Tenant and Service management as supported by FIWARE APIs.

While policies are expressed in a generic way, and as such this means that policies works also for other APIs beyond FIWARE, FIWARE introduced a specific way to support multi-tenancy, and this API complies with FIWARE multi-tenancy model.

A tenant, also named as Fiware-Service, is further segmented into ServicePaths, i.e. hierarchical scoping of the resources part of a given tenant. For a more detailed discussion, you can read the related discussion in FIWARE Orion Context Broker documentation⁠.

This API in short provides a PAP (Policy Administration Point), it does not provide PEP or PDP, it only stores the policies. PEP is provided by Envoy⁠ and PDP is provided by OPA⁠.

Currently the policy models is based on W3C web access control spec⁠.