Hi all, I'm exploring a use case of dogfooding Hyd...
# talk-hydrab
best-napkin-88358
11/09/2021, 7:11 PMHi all, I'm exploring a use case of dogfooding Hydra to internal apps (in addition to using it for external partner integrations). For the internal app(s), I need user's consent to be automatically assumed/applied. Internal apps would still be bound to the scopes they are allowed to access in their client config in Hydra.
What would be the best way to implement this with Hydra?
Something that comes to mind - the Consent endpoint could automatically approve requests coming in for internal apps (based on some meta property of the client in Hydra).
w
worried-dress-75686
11/09/2021, 7:21 PMDo you have control of the code in the internal app accessing Hydra Admin APIs ?
worried-dress-75686
11/09/2021, 7:22 PMI don't think you can remove the consent acknowledgement from Hydra itself, but you can call the endpoint and pretend that consent was accepted by your user.
b
best-napkin-88358
11/09/2021, 7:31 PMYes, internal apps are fully under control.
best-napkin-88358
11/09/2021, 7:33 PMbut you can call the endpoint and pretend that consent was accepted by your user.Right, that's what I meant that consents for internal apps would be automatically issued by the consent endpoint. Is there any other/better way?
w
worried-dress-75686
11/09/2021, 7:34 PMNot that I am aware of, I think calling it on behalf of your users makes sense.
c
clean-hamburger-91078
11/09/2021, 7:53 PMI think the proposed way is the best one, anyway your consent app needs to keep track of every client, so you can opt-out user interaction for specified clients
3 Views