​​Integration of Authentication & Authorization Mechanism for CRUD API with IAM (API Gateway) #2301

[Schpidi]

• Identify and document mechanism to secure STAC API Transaction Extension endpoints via the chosen API Gateway (ingress auth) solution

[achtsnits]

topic got discussed today, see https://eoepca.slack.com/archives/C078J079YLR/p1733232422205209

agreement with Richard to focus on coarse grained authorization based on HTTP routes and HTTP methods for Beta-2 release

the APISIX ingress can be configured to enforce preconfigured Keycloak policies checking Identity Information (like group membership) against current HTTP request

Felix already provided overview for STAC API Transactions
https://eoepca.slack.com/archives/C078J079YLR/p1733231324225879

as soon as we got that working there we need to follow-up on other endpoints which are platform-user facing and need protection