JWT usage with DOI and other Services

[sughics]

Applicable when biocache-serivce is updated to use APIs from API Gateway @ https://api.ala.org.au instead of direct calls to services.

• biocache-service's DoiService will require an update to request new DOI i.e mintDoi using a JWT instead of relying on IP whitelist or API Key (as it is not supported on API Gateway). The JWT will need to be generated with doi/write scope which is required for DOI minting and as such, the Oauth client used by biocache-service will also need to include doi/write scope.

  • Call to userdetails for user lookup also relies on IP whitelist . This will also require an update to use JWT and appropriate scope(s).

[sughics]

Tried an initial implementation for token generation using ala-ws-plugin but it appears that ala-ws-plugin can't be used with non-Grails application. Any ideas on potential solution(s) @brucehyslop ?

[sughics]

Changes have now been implemented in https://github.com/AtlasOfLivingAustralia/biocache-service/pull/796.

• [x] DOI minting calls using JWT.
• [x] Userdetails lookup using JWT

[sughics]

Included in release 3.2.0