Changes for page 2. Authenticating with your OIDC client and fetch collab user info
Last modified by messines on 2021/06/08 17:32
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -65,10 +65,9 @@ 65 65 (% class="wikigeneratedid" id="HRequest-1" %) 66 66 Now that your app has the **authorization** **code** for a user, it can fetch the user access token 67 67 68 -(% class="wikigeneratedid" %) 69 69 ==== Request ==== 70 70 71 -/POST: [[https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token>> url:https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token]]70 +/POST: [[https:~~/~~/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token>>https://iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token]] 72 72 73 73 with the following parameters: 74 74 ... ... @@ -110,7 +110,7 @@ 110 110 111 111 ==== Request ==== 112 112 113 -/GET: [[https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo>> url:https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo]]112 +/GET: [[https:~~/~~/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo>>https://iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo]] 114 114 115 115 with the following parameters: 116 116 ... ... @@ -122,7 +122,7 @@ 122 122 123 123 ==== Response ==== 124 124 125 -As response your app receives a JSON with all the information o nthe logged user124 +As response your app receives a JSON with all the information about the logged user 126 126 127 127 (% class="box" %) 128 128 ((( ... ... @@ -129,8 +129,6 @@ 129 129 { 130 130 "sub": "fa2db206-3...0ebaba98e1", 131 131 "unit": [ 132 - "/collab-devs", 133 - "/collab-team", 134 134 "/all/institutions/switzerland/epfl", 135 135 "/all/projects/hbp/consortium/SGA2/SP05", 136 136 "/all/projects/hbp/consortium/SGA3/WP6/T6_11" ... ... @@ -147,7 +147,7 @@ 147 147 ], 148 148 "group": [ 149 149 "**group**-collaboratory-developers", 150 - "**unit**-all-projects-hbp-consortium-sga2-sp05-administrator" 147 + "**unit**-all-projects-hbp-consortium-sga2-sp05-**administrator**" 151 151 ] 152 152 }, 153 153 "mitreid-sub": "30...62" ... ... @@ -154,12 +154,10 @@ 154 154 } 155 155 ))) 156 156 157 -The groupfield above lists CollaboratoryGroups intheform "group-//groupname//" and CollaboratoryUnitsintheform"unit-//unitname//"with the unitname usingdashes instead of the colons you see in the Collaboratory UI.154 +The unit field above lists Collaboratory Units which the user is a member of, with the unit name using slashes instead of the colons you see in the Collaboratory UI. 158 158 159 - Theteamfieldabove listsCollaboratory Teamsintheform"collab-//collabname//-//role//"where //role //is one ofadmin,editor,or vieweraccording to the user'sroleincollab //collabname//.156 +jupyterhub and xwiki are OIDC clients with more advanced permission management. 160 160 161 - jupyterhub andxwiki areOIDCclients.158 +The team field above lists Collaboratory Teams which the user is a member of, in the form "collab-//collabname//-//role//" where //role //is one of admin, editor, or viewer according to the user's role in collab //collabname//. 162 162 163 -The unit field above lists [useless noise?]. 164 - 165 - 160 +The group field above lists Collaboratory Groups which the user is a member of, in the form "group-//groupname//". It also lists Collaboratory Units which the user is an admin of, in the form "unit-//unitname//-administrator" with //unitname //using dashes instead of the colons you see in the Collaboratory UI.