[Backlogmanager] [FIWARE-JIRA] (HELP-20551) [fiware-stackoverflow] Calling external APIs through fiware orion context broker to validate using keyrock

[Fernando Lopez (JIRA)]

     [ https://jira.fiware.org/browse/HELP-20551?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Fernando Lopez updated HELP-20551:
----------------------------------
    Status: In Progress  (was: Open)

> [fiware-stackoverflow] Calling external APIs through fiware orion context broker to validate using keyrock
> ----------------------------------------------------------------------------------------------------------
>
>                 Key: HELP-20551
>                 URL: https://jira.fiware.org/browse/HELP-20551
>             Project: Help-Desk
>          Issue Type: Monitor
>          Components: FIWARE-TECH-HELP
>            Reporter: Backlog Manager
>            Assignee: Jason Fox
>              Labels: fiware, fiware-keyrock, fiware-orion
>
> Created question in FIWARE Q/A platform on 06-12-2022 at 20:12
> {color: red}Please, ANSWER this question AT{color} https://stackoverflow.com/questions/74708454/calling-external-apis-through-fiware-orion-context-broker-to-validate-using-keyr
> +Question:+
> Calling external APIs through fiware orion context broker to validate using keyrock
> +Description:+
> I am a student working on a project and exploring viability of using fiware for that. So far I've learnt that to call external APIs we can use registrations for an entity to fetch dynamic data.
> Here is the situation:
> In my project, I am calling external APIs for fetching some data at frontend.
> I want to add access control for users so that they are restricted from calling the APIs if not permitted. For this reason I am trying to find out a way such that keyrock can validate the requests so that I don't have to manually validate these external APIs. Since these aren't related to any entity I don't want to use registration for this purpose.
> I intend to do user management through keyrock itself. Currently keyrock can restrict based on resources (i.e. URL path) of the application and permission. I am very confused at this point that if I add an API call at any page to fetch data from external API, how can I make use of keyrock access control in this situation.
> Also, can I make orion call the external API somehow and make the data an entity?
> Any help and hint is greatly appreciated. Thanks in Advance.



--
This message was sent by Atlassian JIRA
(v6.4.1#64016)