forked from TrueCloudLab/frostfs-node
Evgenii Stratonikov
7bc3003803
This is about authentication only and eACL is deprecated, so only mention `allow_impersonate` flag. Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
15 lines
No EOL
356 B
Text
15 lines
No EOL
356 B
Text
@startuml impersonate
|
|
start
|
|
|
|
if (The request has bearer token with allow_impersonate=true?) then (yes)
|
|
:Treat bearer token issuer as the request owner.;
|
|
end
|
|
(no) elseif (The request has session token?) then (yes)
|
|
:Treat session token issuer as the request owner.;
|
|
end
|
|
else (no)
|
|
:Determine request owner from the request signature.;
|
|
end
|
|
endif
|
|
|
|
@enduml |