agrc / electrofishing-query

A web application for viewing and querying electrofishing data
https://electrofishing-query.ugrc.utah.gov
MIT License
0 stars 0 forks source link

UtahID Authentication #182

Closed stdavis closed 2 weeks ago

stdavis commented 3 months ago

The app needs to be secured by UtahID. An identity provider is already set up in GCP.

Currently, agrc/firebase-auth-arcgis-server-proxy is used to secure the ArcGIS Server services via a service worker. I assume that we will need to do the same thing in the new app but I'm not 100% sure.

Blocked by: https://github.com/agrc/kitchen-sink/issues/256

stdavis commented 2 months ago

I remembered today that they asked me to set up a publicly accessible, read-only map service for the same data that this app uses long after this app was built. I'm not sure that we even need authentication for this application anymore. I sent an email to them today asking this question.

stdavis commented 2 months ago

Craig said that they still want to have the application secured.

stdavis commented 2 months ago

I'm assuming this was closed inadvertently. I don't believe that we have this implemented yet.

steveoh commented 2 months ago

https://github.com/agrc/electrofishing-query/commit/212e73ef591aefae02b1eeed6f2e355da6debd3d

Looks like a bug to me. This has a refs token.

stdavis commented 2 weeks ago

This is done in the new app.