Reputation: 191
The way Service Stack lets me call existing Web Service endpoints from a message broker is fantastic. https://github.com/ServiceStack/ServiceStack/wiki/Messaging-and-Redis
But question is how do I authenticate those endpoints? Service Stack provides very convenient attribute based system for locking down web service calls. e.g.
[Authenticate]
//All HTTP (GET, POST...) methods need "CanAccess"
[RequiredRole("Admin")]
[RequiredPermission("CanAccess")]
[RequiredPermission(ApplyTo.Put | ApplyTo.Post, "CanAdd")]
[RequiredPermission(ApplyTo.Delete, "AdminRights", "CanDelete")]
public class Secured
{
public bool Test { get; set; }
}
But when I access this Dto from the message broker all of the authentication attributes are ignored. Can someone point be to documentation about doing authentication in servicestack over a message broker?
Upvotes: 2
Views: 407
Reputation: 143284
The Messaging API are treated as Internal Requests and follow a different Order of Operations to HTTP Requests.
Upvotes: 1