search

CRREL / GRiD-API

9 stars 3 forks source link

GEOAxIS token support #42

Closed AlexMountain closed 5 years ago

AlexMountain commented 6 years ago

Support the ability to treat a valid GEOAxIS token included in one's header as a valid way to authenticate with GRiD's API.

If a user passes us their GA token, GRiD will validate it with the GA server. If the return is valid and the user GA account has a proper email address and geoaxis_id, GRiD will proceed to lookup the user and authenticate the session. If the user does not exist in GRiD, we will automatically try to register the user with the information provided by GA and then grant the authenticated session.

AlexMountain commented 5 years ago

This has been implemented and deployed to all systems with GRiD 1.4.5 as an enhancement to v3.

Active/valid GEOAxIS tokens may now be passed to GRiD's OAuth via the header or as an access_token query parameter.