jimmy/postgrest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Mention JWT in readme

Browse Source
This commit is contained in:
Joe Nelson
2015-05-25 21:46:05 -07:00
parent 1cc53245c5
commit 3f31c60f1d
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+8 -6
View File
@@ -75,12 +75,14 @@ Other optimizations are possible, and some are outlined in the
### Security ### Security
PostgREST handles authentication (HTTP Basic over SSL) and delegates PostgREST handles authentication (HTTP Basic over SSL or [JSON Web
authorization to the role information defined in the database. This Tokens](https://github.com/begriffs/postgrest/wiki/Security-and-Permissions#json-web-tokens))
ensures there is a single declarative source of truth for security. and delegates authorization to the role information defined in the
When dealing with the database the server assumes the identity of database. This ensures there is a single declarative source of truth
the currently authenticated user, and for the duration of the for security. When dealing with the database the server assumes
connection cannot do anything the user themselves couldn't. the identity of the currently authenticated user, and for the
duration of the connection cannot do anything the user themselves
couldn't.
Postgres 9.5 will soon support true [row-level Postgres 9.5 will soon support true [row-level
security](http://michael.otacoo.com/postgresql-2/postgres-9-5-feature-highlight-row-level-security/). security](http://michael.otacoo.com/postgresql-2/postgres-9-5-feature-highlight-row-level-security/).