From a4a9b66fb057cf8c5c7ddf64c7be6faee716b93c Mon Sep 17 00:00:00 2001 From: David Kadlec Date: Wed, 8 Nov 2023 09:39:09 +0100 Subject: [PATCH] chore: semantic fix --- docs/general/attributes.md | 2 +- model/general.yaml | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/docs/general/attributes.md b/docs/general/attributes.md index 061b8d4db1..603121f022 100644 --- a/docs/general/attributes.md +++ b/docs/general/attributes.md @@ -311,8 +311,8 @@ These attributes may be used for any operation with an authenticated or anonymou | Attribute | Type | Description | Examples | Requirement Level | |---|---|---|---|---| -| `enduser.id` | string | Username or client_id extracted from the access token or [Authorization](https://tools.ietf.org/html/rfc7235#section-4.2) header in the inbound request from outside the system. | `username` | Recommended | | `enduser.anon_id` | string | Randomly generated id of an anonymous user that is persisted throughout the lifetime of the visits. | `V1StGXR8_Z5jdHi6B-myT` | Recommended | +| `enduser.id` | string | Username or client_id extracted from the access token or [Authorization](https://tools.ietf.org/html/rfc7235#section-4.2) header in the inbound request from outside the system. | `username` | Recommended | | `enduser.role` | string | Actual/assumed role the client is making the request under extracted from token or application security context. | `admin` | Recommended | | `enduser.scope` | string | Scopes or granted authorities the client currently possesses extracted from token or application security context. The value would come from the scope associated with an [OAuth 2.0 Access Token](https://tools.ietf.org/html/rfc6749#section-3.3) or an attribute value in a [SAML 2.0 Assertion](http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0.html). | `read:message, write:files` | Recommended | diff --git a/model/general.yaml b/model/general.yaml index cfcce21cef..a2fefea1da 100644 --- a/model/general.yaml +++ b/model/general.yaml @@ -15,7 +15,7 @@ groups: prefix: enduser type: span brief: > - These attributes may be used for any operation with an authenticated and/or authorized enduser. + These attributes may be used for any operation with an authenticated or anonymous enduser. attributes: - id: id type: string @@ -24,6 +24,11 @@ groups: [Authorization](https://tools.ietf.org/html/rfc7235#section-4.2) header in the inbound request from outside the system. examples: 'username' + - id: anon_id + type: string + brief: > + Randomly generated id of an anonymous user that is persisted throughout the lifetime of the visits. + examples: 'V1StGXR8_Z5jdHi6B-myT' - id: role type: string brief: 'Actual/assumed role the client is making the request under extracted from token or application security context.'