search

nih-cfde / submission-workflow

0 stars 0 forks source link

Allow login with service tokens #75

Open ACharbonneau opened 3 years ago

ACharbonneau commented 3 years ago

Full text with lots of info at https://github.com/nih-cfde/published-documentation/discussions/188

lliming commented 3 years ago

We have most of the machinery in place to make this possible because we're using Globus, and Globus allows applications (which have Client IDs instead of usernames) to be group members. I think the main thing we'd need to do is add a new login method to the cfde-submit tool that accepts a Client ID and Secret and uses the Client Credentials grant instead of the native app grant it currently uses. Then, groups like Kids First could register an application at developers.globus.org, get their Client ID and Secret, tell Amanda what the Client ID is so she can onboard it to the right group(s), and use the alternate login feature in cfde-submit to use the Client ID and Secret instead of a browser login.

@DavidKelly999 , @rpwagner : thoughts?

DavidKelly-Praedictus commented 3 years ago

This should be possible to do using app id/secret as Lee mentioned. I can add a new login flag that will prompt for that info. Is this something that needs to be done for the March release?

lliming commented 3 years ago

This does not need to be done for the March technical debt release. This would be a new feature, previously unimagined. :) We expect people to use the currently available methods for the moment.