search

isamplesorg / isamples_inabox

Provides functionality intermediate to a collection and central
0 stars 1 forks source link

Allow access tokens through as well as JWT #395

Open dannymandel opened 1 week ago

dannymandel commented 1 week ago

Access tokens are long lived, JWT aren't.

dannymandel commented 1 week ago

On reviewing some of the other export bits, I think we need more than this, actually. In the export service, we record the orcid of the user that initiated the download, and that code reads that out of the JWT. We'll need to change that code as well, to do a lookup against the user info service in case a token is used.