You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We need to adjust the fence workflow because there is some breaking changes in Gen3. Here a message from Gen3 team about this :
The change will be in step 11 of your "Connect Fence" diagram (the portal decodes the JWT token and uses the projects list to display or not some actions). The tokens will no longer contain the projects, you will need to hit Fence's /user endpoint with the token. This endpoint returns:
project_access: (project name -> list of permissions) dictionary, in the same format as what used to be in the tokens.
authz: (arborist resource name -> list of (permission, service) roles) dictionary, which is basically a dump of what is in Arborist.
resources: list of all the resources the user can access, regardless of the method (so it's essentially the keys of the authz dict).
Using the project_access field would be the least amount of work since it's in the format you already use.
But the other fields use the names that are stored in arborist, which are the ones that will be in indexd and in your user.yaml, so more consistent (it should be something like /programs/phs000 instead of phs000). I think you are only using the "read-storage" permission (for download) so the resources field should work well for your use case
In other words, instead of decoding the token, the UI need to fetch an endpoint to get the data. If we look to this documentation, we need to adjust these flow (changes in red):
Connect Fence
Get token
Refresh token
Also, don't forget to update the documentation in Confluence
The text was updated successfully, but these errors were encountered:
Objective
We need to adjust the fence workflow because there is some breaking changes in Gen3. Here a message from Gen3 team about this :
In other words, instead of decoding the token, the UI need to fetch an endpoint to get the data. If we look to this documentation, we need to adjust these flow (changes in red):
Connect Fence
Get token
Refresh token
Also, don't forget to update the documentation in Confluence
The text was updated successfully, but these errors were encountered: