judo-runtime:access-control

What problem does it solve?

This Skill provides a comprehensive framework for defining and enforcing access control rules within JUDO Runtime applications, ensuring that only authorized actors can access specific operations and data.

Core Features & Use Cases

• Actor-Based Authorization: Differentiate between public and authenticated actors.
• Operation Exposure Control: Explicitly define which actors can invoke specific operations using exposedBy annotations.
• Customizable Authentication: Integrate custom authentication logic via interceptors.
• Use Case: Secure a banking application by ensuring that only authenticated Customer actors can perform transferFunds operations, while PublicUser actors can only access viewAccountBalance.

Quick Start

Configure the access control rules for the 'Model.OrderService' operations to be accessible only by 'Model.AuthenticatedUser'.