Changes for page 2. Authenticating with your OIDC client and fetch collab user info
Last modified by messines on 2021/06/08 17:32
Summary
-
Page properties (2 modified, 0 added, 0 removed)
Details
- Page properties
-
- Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki.m essines1 +XWiki.mmorgan - Content
-
... ... @@ -67,7 +67,7 @@ 67 67 68 68 ==== Request ==== 69 69 70 -/POST: [[https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token>> url:https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token]]70 +/POST: [[https:~~/~~/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token>>https://iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/token]] 71 71 72 72 with the following parameters: 73 73 ... ... @@ -109,7 +109,7 @@ 109 109 110 110 ==== Request ==== 111 111 112 -/GET: [[https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo>> url:https:/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo]]112 +/GET: [[https:~~/~~/iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo>>https://iam.ebrains.eu/auth/realms/hbp/protocol/openid-connect/userinfo]] 113 113 114 114 with the following parameters: 115 115 ... ... @@ -121,7 +121,7 @@ 121 121 122 122 ==== Response ==== 123 123 124 -As response your app receives a JSON with all the information o nthe logged user124 +As response your app receives a JSON with all the information about the logged user 125 125 126 126 (% class="box" %) 127 127 ((( ... ... @@ -144,7 +144,7 @@ 144 144 ], 145 145 "group": [ 146 146 "**group**-collaboratory-developers", 147 - "**unit**-all-projects-hbp-consortium-sga2-sp05-administrator" 147 + "**unit**-all-projects-hbp-consortium-sga2-sp05-**administrator**" 148 148 ] 149 149 }, 150 150 "mitreid-sub": "30...62" ... ... @@ -151,12 +151,10 @@ 151 151 } 152 152 ))) 153 153 154 -The groupfield above lists CollaboratoryGroups intheform "group-//groupname//" and CollaboratoryUnitsintheform"unit-//unitname//"with the unitname usingdashes instead of the colons you see in the Collaboratory UI.154 +The unit field above lists Collaboratory Units which the user is a member of, with the unit name using slashes instead of the colons you see in the Collaboratory UI. 155 155 156 - Theteamfieldabove listsCollaboratory Teamsintheform"collab-//collabname//-//role//"where //role //is one ofadmin,editor,or vieweraccording to the user'sroleincollab //collabname//.156 +jupyterhub and xwiki are OIDC clients with more advanced permission management. 157 157 158 - jupyterhub andxwiki areOIDCclients.158 +The team field above lists Collaboratory Teams which the user is a member of, in the form "collab-//collabname//-//role//" where //role //is one of admin, editor, or viewer according to the user's role in collab //collabname//. 159 159 160 -The unit field above lists [useless noise?]. 161 - 162 - 160 +The group field above lists Collaboratory Groups which the user is a member of, in the form "group-//groupname//". It also lists Collaboratory Units which the user is an admin of, in the form "unit-//unitname//-administrator" with //unitname //using dashes instead of the colons you see in the Collaboratory UI.