DataHub probably doesn't need to be a full OIDC provider, but it'd be useful to have an authentication scope like 'profile' and a user info endpoint which is only viewable with the profile scope.
Apps often act as themselves, but need to verify a user's identity on DataHub before sharing a repo with them. The existing read and write scopes are overkill for just authentication.
DataHub probably doesn't need to be a full OIDC provider, but it'd be useful to have an authentication scope like 'profile' and a user info endpoint which is only viewable with the profile scope.
Apps often act as themselves, but need to verify a user's identity on DataHub before sharing a repo with them. The existing read and write scopes are overkill for just authentication.