Explicit tenant ID assignment on SK sharing APIs

tapis-project / tapis-java

Texas Advanced Computing Center APIs

BSD 3-Clause "New" or "Revised" License

5 stars 6 forks source link

Explicit tenant ID assignment on SK sharing APIs #75

Open richcar58 opened 2 years ago

richcar58 commented 2 years ago

All SK sharing endpoints should now require that the grantee tenantId be explicitly provided in the payload or as a query parameter. Currently, the tenantId is implicitly set to the oboTenant, which is brittle and error prone on cross site requests.