Details
-
Type:
Improvement
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: None
-
Labels:None
-
Story Points:1
-
Epic Link:
-
Sprint:Fall 6 2021 Oct 25 - Nov 5
Description
Situation: To authorize users to login to CyVerse we use the Terrain OAuth2 authorization endpoint (auth.cyverse.org/cas5/oauth2.0/authorize). The CyVerse team has stated that they are going to use a new endpoint for authenticating users using Keycloak.
Task: Investigate the CyVerse Terrain documentation to identify how we can use the new Keycloak authentication endpoint.
https://de.cyverse.org/terrain/docs/index.html#!/token/get_terrain_token_keycloak
Attachments
Activity
| Field | Original Value | New Value |
|---|---|---|
| Epic Link | IGBF-2376 [ 18533 ] |
| Issue Type | Support [ 15 ] | Improvement [ 4 ] |
| Sprint | Winter 4 Feb 8 - Feb 19 [ 114 ] | Winter 5 Feb 22 - Mar 5 [ 115 ] |
| Sprint | Winter 5 Feb 22 - Mar 5 [ 115 ] |
| Sprint | Fall 6 2021 Oct 25 - Nov 5 [ 132 ] |
Looks like we have investigated and concluded that for now, nothing is needing to be done. Moving to closed.
Created new ticket IGBF-2996 "Migrate to using Terrain Keycloak for authenticating users"
| Status | To-Do [ 10305 ] | In Progress [ 3 ] |
| Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
| Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
| Status | First Level Review in Progress [ 10301 ] | Ready for Pull Request [ 10304 ] |
| Status | Ready for Pull Request [ 10304 ] | Pull Request Submitted [ 10101 ] |
| Status | Pull Request Submitted [ 10101 ] | Reviewing Pull Request [ 10303 ] |
| Status | Reviewing Pull Request [ 10303 ] | Merged Needs Testing [ 10002 ] |
| Status | Merged Needs Testing [ 10002 ] | Post-merge Testing In Progress [ 10003 ] |
| Resolution | Done [ 10000 ] | |
| Status | Post-merge Testing In Progress [ 10003 ] | Closed [ 6 ] |
| Link | This issue relates to IGBF-2996 [ IGBF-2996 ] |
NF: CyVerse has now moved to KeyCloak for user authentication and at some point may stop supporting the current scheme, which we are using. We need to migrate to using KeyCloak.
Question: Do users need to do anything with their accounts? NF: Nothing changed for me, as a user. So probably users are oblivious to the change.