mirror of https://github.com/dapr/docs.git
Update daprdocs/content/en/reference/components-reference/supported-middleware/middleware-oauth2.md
Co-authored-by: Alice Gibbons <alicejgibbons@gmail.com> Signed-off-by: Mark Fussell <markfussell@gmail.com>
This commit is contained in:
parent
24e128d128
commit
2884cd0841
|
|
@ -130,7 +130,6 @@ spec:
|
||||||
value: "^/api/admin/.*"
|
value: "^/api/admin/.*"
|
||||||
```
|
```
|
||||||
|
|
||||||
In this configuration:
|
|
||||||
- Requests to `/api/users/*` endpoints receive tokens with limited user scopes
|
- Requests to `/api/users/*` endpoints receive tokens with limited user scopes
|
||||||
- Requests to `/api/admin/*` endpoints receive tokens with full administrative privileges
|
- Requests to `/api/admin/*` endpoints receive tokens with full administrative privileges
|
||||||
- This reduces security risk by preventing privilege escalation and limiting the blast radius of compromised tokens
|
- This reduces security risk by preventing privilege escalation and limiting the blast radius of compromised tokens
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue