Comments (3)
+1 to adding /api/security
or similar in an extension, in case the OpenAPI security scheme declarations are not sufficient for common use cases.
Maybe this should then also be raised at https://github.com/OAI/OpenAPI-Specification/issues since this does not sound like a geo-specific requirement and would best be addressed by ICT standards, not by OGC standards?
from ogcapi-features.
Already done. See OAI/OpenAPI-Specification#1004 for part of the discussion. A number of other issues touch on updates to the security declarations as well. I have been working on a set of requirements based on the U.S. NIST taxonomy of security controls. Next step is to try to pull all of these issues together into a viable proposal. Frank Terpstra is playing as well so we can tag-team.
from ogcapi-features.
It appears that all of the security schemes commonly used by OGC implementations are supported by OpenAPI. Recommend closing this issue. Specific deficiencies in the OpenAPI Security Schemes should be tracked through their own issues.
from ogcapi-features.
Related Issues (20)
- Schemas: `x-ogc-unit-lang` or `x-ogc-unitLang` ? HOT 3
- Schemas: Clarifications / Example on what URIs / vocabs should be used for `x-ogc-definition` HOT 4
- Simplify scalar expression
- CQL2/Grammar: Quoted identifiers not defined as expected HOT 6
- CQL2/Grammar: signedNumericLiteral does not seem to be defined correctly HOT 2
- A dedicated section for links HOT 2
- Part 4: Create: returning the created feature in the body of the response ? HOT 2
- Broken urls on Cubewerx page
- Extended property selection with CQL2 expressions (like SQL SELECT) HOT 2
- Part 5: relating the Schema requirement class to Part 1 describedBy HOT 4
- Query parameter properties: align with OGC API Coverages
- Collection extent: End inclusive or exclusive HOT 3
- Part 5: Feature references with more complex values
- Part 9: Simple text search to search multiple collections HOT 4
- Part 4: Discussions about submitting a list of Features?
- Part 4: application/json as media type?
- Part 5: x-ogc-propertySeq seems useless? HOT 1
- Part 5: Add table of x-ogc- properties HOT 1
- Part 5: The limitations of JSON data types HOT 5
- Part 4: Editorial link inconsistencies HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ogcapi-features.