Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release stytch-node v10 with new RBAC features #284

Merged
merged 6 commits into from
Dec 13, 2023
Merged

Conversation

logan-stytch
Copy link
Contributor

@logan-stytch logan-stytch commented Dec 8, 2023

RBAC

  • The Stytch product will soon support role-based access control (RBAC)! See our RBAC guide at https://stytch.com/docs/b2b/guides/rbac/overview for more detailed explanations of our RBAC product.
  • RBAC policies must be set through the dashboard, but you can use various endpoints to assign Roles to Members and add implicit role assignments to Organizations and SSO connections (more details in the guide at https://stytch.com/docs/b2b/guides/rbac/role-assignment).
  • You can perform an RBAC authorization check when authenticating a JWT. This will use a locally cached version of the RBAC policy.
  • Some endpoints, such as Create Member, offer out-of-the-box handling of RBAC authorization checks if a session token or session JWT is passed in.

Other changes

  • Added support to send additional headers in method requests. This is used for certain routes that can be used in conjunction with RBAC for authorization, like magicLinks.email.invite().
  • Some methods will now have a new optional $METHODRequestOptions field – this is used to supply authorization data for RBAC (see previous point).
    authenticate_jwt and authenticate_jwt_local now accept an optional AuthorizationCheck parameter for performing RBAC checks. These will use a cached version of the project's RBAC policy in order to make an authZ verdict.
  • Additionally, this update features a large amount of documentation updates which should better reflect what you can find at https://stytch.com/docs.

@logan-stytch logan-stytch changed the title [DNM] Release stytch-node v10 with new RBAC features Release stytch-node v10 with new RBAC features Dec 13, 2023
@logan-stytch logan-stytch merged commit 4b94ab7 into main Dec 13, 2023
9 checks passed
@logan-stytch logan-stytch deleted the v10-prerelease branch December 13, 2023 21:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants