Skip to content

Authorization Consistency Across MDS #584

@schnuerle

Description

@schnuerle

Is your feature request related to a problem? Please describe.

Currently each MDS API has its own descriptions of authorization methods and options.

Provider: Entire Auth.md page with JWT recommended

Agency: Authorization section that requires JWT

Policy: Authorization is not mentioned

Geography: Authorization section and bearer token language with public option

General Information: Authorization is not mentioned

Describe the solution you'd like

These disparate authorization descriptions should be consolidated across MDS and likely put into the General Information page with sections for JWT. The content from Provider could be a starting point, with additional subsections around optional JWT auth, public feeds, etc. Then each API can reference and link to the appropriate section consistently.

Is this a breaking change

  • I'm not sure

Impacted Spec

For which spec is this feature being requested?

  • agency
  • policy
  • provider

Describe alternatives you've considered

N/A

Additional context

This came up in a Working Group call on Oct 7 2020.

Metadata

Metadata

Assignees

No one assigned

    Labels

    AgencySpecific to the Agency APIGeographyItems related to the Geography APIPolicySpecific to the Policy APIProviderSpecific to the Provider APIadminAdministrative chores etc.documentationdocumentation change can be for code and/or markdown pagessecurityImpacts the security of data flow/access or authentication

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions