Extension Authorization Service

These CKAN Versions are exactely matched:

• 2.8.0
• 2.8.1
• 2.8.10
• 2.8.11
• 2.8.12
• 2.8.2
• 2.8.3
• 2.8.4
• 2.8.5
• 2.8.6
• 2.8.7
• 2.8.8
• 2.8.9
• 2.9.0
• 2.9.1
• 2.9.10
• 2.9.11
• 2.9.2
• 2.9.3
• 2.9.4
• 2.9.5
• 2.9.6
• 2.9.7
• 2.9.8
• 2.9.9
• 2.10.0
• 2.10.1
• 2.10.2
• 2.10.3
• 2.10.4
• 2.10.5
• 2.10.6
• 2.10.7
• 2.10.8

The Authorization Service extension transforms CKAN into a comprehensive JWT token authority for microservice architectures and external system integrations. This sophisticated extension generates cryptographically signed JWT tokens that encapsulate both user identity and granular permissions, enabling secure authentication across distributed systems. It implements a flexible scope-based authorization model supporting organizations, datasets, and resources with fine-grained action controls including read, write, delete, and custom operations. The extension provides RESTful API endpoints for token generation, verification, and public key distribution, supporting both symmetric and asymmetric cryptographic algorithms including RS256, HS256, and custom implementations. Token lifecycle management includes configurable expiration times, audience validation, and optional user email inclusion. The system seamlessly integrates with CKAN’s existing authorization framework while extending it for modern cloud-native applications. Essential for enterprise environments requiring single sign-on, API gateway authentication, and secure service-to-service communication with full audit trails and permission inheritance.