wellcomecollection / identity

Identity services for Wellcome Collection users
MIT License
0 stars 2 forks source link

Add callback and logout URLs for IIIF image app #407

Closed kenoir closed 2 months ago

kenoir commented 2 months ago

What does this change?

This change adds the correct callback and logout URLs for the IIIF Image application in Auth0 that allows restricted logins to occur.

Part of https://github.com/wellcomecollection/platform/issues/5747

See https://wellcome.slack.com/archives/CBT40CMKQ/p1723462603970219?thread_ts=1720700716.827569&cid=CBT40CMKQ

terraform plan

Terraform will perform the following actions:

  # auth0_client.iiif_image_api will be updated in-place
  ~ resource "auth0_client" "iiif_image_api" {
      ~ allowed_logout_urls                 = [
            "https://iiif.wellcomecollection.org/auth/v2/access/2/eden/logout",
          + "https://iiif.wellcomecollection.org/auth/v2/access/2/restrictedlogin/logout",
        ]
        id                                  = "REDACTED"
        name                                = "IIIF Image API"
        # (19 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[!NOTE] This change has already been applied in the staging and production tenants.

How to test

How can we measure success?

The restricted login work is enabled by this change.

Have we considered potential risks?

If these URLs are incorrect or for a bad source that could cause issues, but these have been checked by Digirati hopefully mitigating that risk.