search

abergs / mstest

0 stars 0 forks source link

Case: Logging in to Portal #14

Open abergs opened 9 years ago

abergs commented 9 years ago
  1. User enters username + password
  2. Sends credentials to ID Service (should we also send that this is the portal?)
  3. ID Service returns matching identity, that contains ID, name + access_token
  4. Client retrieves systems that the user has access too (/systems/me) by appending the access_token.
  5. UI displays the available systems + common name (and if the portal is activated for that system). The UI should show systems marked as favorite/popular/recent systems first in the list)
  6. Fetch relevant applicationdata with access_token + choosen systemname
    • Fetch metdata (to hide specific parts which is not activated for this user)

      Notes

The permissions for the portal should not contain permissions for "mobile". Logging in to the portal does not grant you access to mobile.caspeco.se, because it should always be harmless to login to the portal.