Add a new user-details endpoint that uses OAuth 2.0 scoping to reduce the kinds of users who can access a given data resource. Include support for county in the address model per the related story at HIVE-1143.
Checklists
Basic
[x] Did you write tests for the code in this PR?
[x] Did you document your changes in the README and/or in docstrings (as needed)?
Security
[x] Authorization has been implemented across these changes
[x] Injection has been prevented (parameterized queries, no eval or system calls)
[x] Any web UI is escaping output (to prevent XSS)
[x] Sensitive data has been identified and is being protected properly
Frontend
[x] HTTP links should embed text that clearly explains what information your readers will find when they click on a hyperlink. Read more about HTML accessibility.
Notes for the Reviewer
The user-details endpoint should provide more fields (including SSN) in a result; however it should not bleed over into other endpoints.
Description
Add a new
user-detailsendpoint that uses OAuth 2.0 scoping to reduce the kinds of users who can access a given data resource. Include support forcountyin the address model per the related story at HIVE-1143.Checklists
Basic
Security
Frontend
Notes for the Reviewer
The
user-detailsendpoint should provide more fields (including SSN) in a result; however it should not bleed over into other endpoints.