Skip to content

Update POST /workspace to accept an auth_config #306

@TessFerrandez

Description

@TessFerrandez

As a TRE admin
I want to supply the information about the AAD App when creating a workspace
so that we can validate against this data if a user should have access to see the resource

This will be used to validate the access for a user to the workspace

NOTE: data here is different for each provider so it should be given as a dict

Acceptance criteria:

  • The workspace post should accept an auth_config as part of the request with the following format
    "auth_config": {"provider": "AAD", "data": {"app_id": "blabla"}} -- NOTE: the data portion is different for each provider so make this a dict
  • Validates that auth configuration is provided.
  • For AAD validates that the APP has the roles "owner" and "researcher"
  • Stores the APP Role IDs for the owner and researcher roles as part of the workspace request
  • Stores the SP object ID as part of the resource request

Metadata

Metadata

Assignees

Labels

apiComposition Service APIauthAuthentication and authorizationsize/MstoryStories are the smallest unit of work to be done for a project.

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions