search

eu-cdse / documentation

Technical documentation for Copernicus Data Space Ecosystem
18 stars 10 forks source link

Finetune requirements and documentation of using client credentials with openeo #630

Open soxofaan opened 3 weeks ago

soxofaan commented 3 weeks ago

With #624 a new doc page was added explaining some CDSE openEO authentication details, including the feature of using the client credentials created from the SentinelHub dashboard app: https://documentation.dataspace.copernicus.eu/APIs/openEO/authentication.html#obtaining-client-credentials

https://github.com/eu-cdse/documentation/blob/7dce3b47d262cc25d091536b26a06745c2e631ad/APIs/openEO/authentication.qmd#L195-L200

This section is intentionally a bit vague at the moment, and needs some more finetuning.

For example from @rahmandawibowo-vito I learned that it's not immediately possible to "link" the client credentials with a user account, the user first has to run a batch job with these client credentials, so that an account for this client is created in the marketplace.

What also needs some clarification I think is how credits are associated, how they are linked (or not) between user and client, and how it is represented in the marketplace.

cc @rahmandawibowo-vito @JanssenBrm

soxofaan commented 2 weeks ago

FYI: with https://github.com/eu-cdse/documentation/pull/636 I added this section to the CDSE docs on how to get the OIDC "sub" identifier of a service account: https://documentation.dataspace.copernicus.eu/APIs/openEO/authentication/client_credentials.html#obtain-the-oidc-identifier-of-a-service-account

soxofaan commented 2 weeks ago

related (internal) cross-reference: MKTP-471