Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-8210

[Fiware-lab-help] Reporting Fiware Lab OAUTH2 API issues

    Details

    • Type: extRequest
    • Status: Closed
    • Priority: Major
    • Resolution: Done
    • Fix Version/s: 2021
    • Component/s: FIWARE-TECH-HELP
    • Labels:
      None

      Description

      Greetings

      I'm sending this email to report a few issues I've come across while attempting to use Fiware lab as a OAUTH2 provider. This is following up from a previous email I've sent, after some additional testing on my end:

      • The API endpoint /user described in the doc http://fiware-idm.readthedocs.io/en/latest/oauth2.html never seems to return anything under the organisations field. Even if the app that provided the token has organisations allowed, and my user is a member of said organisation, the organisations field always returns an empty array.
      • The API endpoint /user seems to have an issue where it seems to treat any endpoint that begins with "/user" the same way, meaning that if I try the endpoint /userbhjsjhjhsfj it would still end up giving me the /user endpoint with no errors reported, as if it's being resolved as a regex that goes /user.* by the server. This causes conflicts with this other documented API endpoint /users/:id http://fiware-idm.readthedocs.io/en/latest/user_guide.html#get-a-single-user which should in theory allow me to specify a user to retrieve info about without the need of an access token.
      • Not exactly an issue to report, but it would be immensely convenient if, similar to Github's OAUTH, there was a /orgs endpoint to retrieve organisations directly rather than individual users.

      Best regards

      Gabriele
      __________________________________________________________________________________________

      You can get more information about our cookies and privacy policies on the following links:

      Fiware-lab-help mailing list
      Fiware-lab-help@lists.fiware.org
      https://lists.fiware.org/listinfo/fiware-lab-help

      [Created via e-mail received from: gabriele.cerfoglio@martel-innovate.com]

        Activity

        Hide
        aalonsog Alvaro Alonso added a comment -

        Hi again Gabriele,

        • When getting information about a user from an OAuth2 token, Keyrock returns those organizations that only returns those organizations that satisfy two requirements: 1) the user is a member of the organization and 2) the user has a role assigned as a member of the organization. To assign roles to a user as a member of an organization, the owner has to loggin in the platform as the organization (using the dropdown in the right top corner) and there assign the roles.
        • We have created a bug report (SEC-1039) regarding the /user endpoint. It will be fixed in the next release.
        • We will study the possibility of /orgs endpoint. Many thanks for the suggestion.

        Hope this helps.

        Show
        aalonsog Alvaro Alonso added a comment - Hi again Gabriele, When getting information about a user from an OAuth2 token, Keyrock returns those organizations that only returns those organizations that satisfy two requirements: 1) the user is a member of the organization and 2) the user has a role assigned as a member of the organization. To assign roles to a user as a member of an organization, the owner has to loggin in the platform as the organization (using the dropdown in the right top corner) and there assign the roles. We have created a bug report (SEC-1039) regarding the /user endpoint. It will be fixed in the next release. We will study the possibility of /orgs endpoint. Many thanks for the suggestion. Hope this helps.

          People

          • Assignee:
            aalonsog Alvaro Alonso
            Reporter:
            fw.ext.user FW External User
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: