CDLUC3 / dmsp_rails_prototype

Prototype DMSP Rails7 API app
0 stars 0 forks source link

Build out the Auth endpoint(s) #6

Closed briri closed 6 months ago

briri commented 8 months ago

We have already started exploring this in the dmsp_aws_prototype repository.

We need to build an auth endpoint that Cognito will redirect to in order to exchange the grant code with an access token. The access token should then be sent to the UI.

We need this function to fetch the pertinent user info from Cognito and create a local record in the RDS database. The user id should be the Cognito id.

The auth token should then be stored in a session table (see the ticket about setting up Devise/Doorkeeper).

We probably need to build a Logout endpoint here as well that destroys the local session and then redirects to Cognito for the full logout.

Build RSpec tests!

briri commented 6 months ago

We will be using Shibboleth SP and the local DB instead