guardian
guardian copied to clipboard
Authorise Guardian API
Summary Currently, whoever has access to Guardian APIs like registering a provider, approving an appeal, revoking the access etc can trigger this APIs w/o any authorization.
Proposed solution Proxy Guardian Admin APIs behind the Shiled and check authorization of people as configured in guardian-shield proxy.