The Wayback Machine - https://web.archive.org/web/20210711100251/https://github.com/TykTechnologies/tyk/issues/2332
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gateway API should validate ACL integrity #2332

Open
lonelycode opened this issue Jun 7, 2019 · 2 comments
Open

Gateway API should validate ACL integrity #2332

lonelycode opened this issue Jun 7, 2019 · 2 comments

Comments

@lonelycode
Copy link
Member

@lonelycode lonelycode commented Jun 7, 2019

**Do you want to request a feature or report a bug?

Feature?

What is the current behavior?
Session object ACLs require both the key and the api_id field of the ACL definition to match.

If they mismatch the API does not throw an error.

What is the expected behavior?

The Gateway API should report the discrepancy to stop the token from being generated.

@stale
Copy link

@stale stale bot commented Mar 25, 2020

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs, please add comments to this ticket if you would like it to stay open. Thank you for your contributions.

@stale stale bot added the wontfix label Mar 25, 2020
@tharun208
Copy link

@tharun208 tharun208 commented Apr 11, 2020

I like to work on this

@stale stale bot removed the wontfix label Apr 11, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment