SKAO front-end permissions service API Overview

This repository contains the SKAO front-end permissions service that is used to serve the permissions of an authenticated user of a front end application according to the role and group assignment of the user in MS Entra.

Automatic API Documentation

For detailed documentation of the API, see the FastAPI Swagger UI documentation. This interactive API documentation can be accessed at http://127.0.0.1:8000/docs when running the application locally or https://<domain>/<namespace>/api/docs when deployed behind an ingress.

Basic Usage

Get user role endpoint

The getuserrole endpoint can be used to obtain the user groups and role assignments of the authenticated user. This is done by using the access token to obtain all the goups assigned to the user in MS Entra. This list is then parsed and the role assignment is returned.

GET /getuserrole

{
"telescope":"mid&low",
"user_role":["aiv"]
}