GPII Authorization Workflows

From wiki.gpii
Revision as of 23:41, 15 November 2018 by Cindyli (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Summary

This document provides GPII authorization workflows for these use cases:

Between the Local Flow Manager to the Cloud Based Flow Manager

When the Local Flow Manager communicates with the Cloud Based Flow Manager, the privacy filtering is performed by the Cloud Flow Manager. Only the filtered lifecycle instructions are returned back to the Local Flow Manager. No authorization is implemented for this use case for now.

Auth-local flow manager to cloud based flow manager.png

Locally integrated web applications

Locally integrated web applications communicate through a browser extension with the Local Flow Manager. The browser extension establishes a web socket connection with the Local Flow Manager to access preferences settings. The Local Flow Manager also notifies the browser extension at any time when the settings change. No authorization is implemented for this use case for now.

References:

  • The implementation of a chrome extension that retrieves settings from Flow Manager and applies them to the current web page. The application of settings is performed by javascript on the current page.
  • The implementation of another chrome extension that retrieves settings from Flow Manager and applies them to the all chrome pages in all tabs. The application of settings is performed by the extension itself.
  • The documentation of GPII Browser Channel that processes web socket requests and notifies connected clients at any time when the settings change.
Auth-locally integrated web apps.png

Note:

  1. The chrome extension potentially can communicate with either GPII local or cloud flow manager. This use case assumes the extension talks to the local flow manager.
  2. When the GPII local flow manager runs in the untrusted configuration, the processing performed by the GPII local flow manager to retrieve settings is same as what is performed in the diagram above at the section of "Between the Local Flow Manager to the Cloud Based Flow Manager" by the GPII cloud based flow manager .

Discussions