scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-09-20 00:11:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
skillhub/document/i18n/en/docusaurus-plugin-content-docs/current/04-developer/architecture/security.md
tww 19329480c8 feat(docs): complete Docusaurus website with bilingual support 
Add complete bilingual (Chinese/English) documentation website:
- Chinese documentation in docs/
- English documentation in i18n/en/
- iFlytek blue theme customization
- Role-based navigation structure
- ToB enterprise value-focused content
2026-03-15 18:36:59 +08:00

1.5 KiB
Raw Blame History

title sidebar_position description
Security Architecture 3 Security architecture design

Security Architecture

Authentication Architecture

OAuth2 Login

  • Based on Spring Security OAuth2 Client
  • Phase 1 supports GitHub
  • Architecture supports extending multiple providers

CLI Authentication

  • OAuth Device Flow
  • Web authorization issues CLI credentials
  • Supports API Token

Session Management

  • Spring Session + Redis
  • Distributed session sharing
  • Supports multi-pod deployment

Authorization Architecture

Platform Roles

Role Permissions
SUPER_ADMIN All permissions
SKILL_ADMIN Skill governance
USER_ADMIN User governance
AUDITOR Audit read-only

Namespace Roles

Role Permissions
OWNER Namespace owner
ADMIN Review, member management
MEMBER Publish skills

Visibility Rules

Visibility Who can access
PUBLIC Anyone (anonymous)
NAMESPACE_ONLY Namespace members
PRIVATE owner + namespace ADMIN

Auditing

All critical operations synchronously write to audit logs:

  • Publish, download, delete
  • Review approval, rejection
  • Permission changes
  • Configuration changes

Rate Limiting

  • Ingress layer basic rate limiting (Nginx)
  • Application layer fine-grained rate limiting (Redis sliding window)

Next Steps