Wis2box Access Control
Wis2box Access Control
access control
Reminder: recommended data in WIS 2.0
WIS 2.0
TP
d/…
HT
d/… and downloads data from WIS2-Node
WIS2 Node MQTT
Global Broker
access control HT
TP
Global Cache
Within wis2box datasets can be made restricted by adding a token using ‘wis2box auth’ commands:
2box auth add-token --metadata-id urn:wmo:md:mw-mw_met_centre:surface-weather-observations Secr3tT0ke
To access a restricted dataset Data Consumers need to include this token in their HTTP-request-headers
curl -H "Authorization: Bearer Secr3tT0ken1!" "<canonical-
url>"
WIS2-in-a-box
storage
download recommended data data-consumer-1
proxy via wis2box-auth
HTTP-proxy 1 not allowed
incoming public
download recommended data
data-consumer-2
-H “Authorization: Bearer Secr3tT0ken1!” allowed
2