Generate microservice tokens and accounts via CLI

adsabs / adsws

ADS web services

Other

2 stars 14 forks source link

Generate microservice tokens and accounts via CLI #111

Open spacemansteve opened 7 years ago

spacemansteve commented 7 years ago

There is existing support to create users and their tokens via the command line interface. However, this does not support making the tokens needed for microservice accounts.

spacemansteve commented 7 years ago

How are microservice user accounts different than human user accounts

email addess is microservice-name@ads
No password
No confirmed_at
No last_login_at
No login_count
No registered_at
ratelimit_level is 1000 (human users do not have a rate limit)

Active is set to true. For some microservice users, is_personal is true, for others it is false.

spacemansteve commented 7 years ago

How are microservice oauth2token records different than human oauth2token records

Some users do not have oauth2token record
_scopes has different value
is_internal is true (most humans have false)
expires date is often in the year 2050 (rather than 2500 for humans)

spacemansteve commented 7 years ago

How are microservice oauth2client records different than human oauth2client records

name contains microservice name (humans have "BBB client")
No last_activity (humans have timestamp)
No _default_scopes
is_confidential is true (varies for humans)

is_internal is true for all.
_redirect_urls empty for all. website empty for all.

spacemansteve commented 7 years ago

Perhaps we could add an argument --microservice that would

Set _scopes to adsws:internal api (does this work for any micorservice?, why does orcid have ads-consumer:orcid ads-consumer:user?)
Set ratelimit to 1000

spacemansteve commented 7 years ago

python scripts/generate_oauth_client.py --create-user --personal --microservice --user-email vis-services@ads --name "vis-services@ads"