Authentication & Authorization
Identity federation based on Single Sign-On.
Authentication and authorization implementation
Authentication:
Gsuite-Auth-Wrapper component
Implements an authentication service that validates users based on the Google groups they belong to. This component communicates directly with the Auth-Service component, which receives the queries and establishes the connection with the Google Directory.
This component has four endpoints, split across two controllers: ValidateController (1) and GroupsController (3).
The first only exposes validateRol, which filters whether the user belongs to a list of groups passed as input
parameters, returning the filtered list of groups where a match was found. The second provides three similar
capabilities focused on obtaining a list of groups by user ID, group ID, or token.
Authorization:
Auth-Service component
Implements an authentication service that enables communication between the gsuite-auth-wrapper component and the application, for both back-end and front-end logic. This component has two endpoints: the first returns the roles associated with an account within the LATAM domain based on the groups it belongs to, and the second validates authorization against a list of roles. In both cases, the configmap declared in this component's deployment.yaml file is used.
