openlibraryenvironment/gokb

New Role for UI client

Closed this issue · 0 comments

For endpoints that should be protected from public access but need to be accessed by the UI without a specific user context, a solution would be to have a dedicated UI client user which can be configured in application.yml and generated in Bootstrap.groovy.This user may benefit from a dedicated new role (ROLE_UI ?) to better control specific permissions.

Possible endpoints checking for this could be /roles and /register