feat(api): add OIDC API access feature gate to authentication IQSS#9229

poikilotherm · Dec 14, 2022 · 04b7eac · 04b7eac
1 parent f5862e3
commit 04b7eac
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/main/java/edu/harvard/iq/dataverse/api/AbstractApiBean.java b/src/main/java/edu/harvard/iq/dataverse/api/AbstractApiBean.java
@@ -56,6 +56,7 @@
 import edu.harvard.iq.dataverse.privateurl.PrivateUrlServiceBean;
 import edu.harvard.iq.dataverse.locality.StorageSiteServiceBean;
 import edu.harvard.iq.dataverse.search.savedsearch.SavedSearchServiceBean;
+import edu.harvard.iq.dataverse.settings.FeatureGates;
 import edu.harvard.iq.dataverse.settings.JvmSettings;
 import edu.harvard.iq.dataverse.settings.SettingsServiceBean;
 import edu.harvard.iq.dataverse.util.BundleUtil;
@@ -443,8 +444,8 @@ private AuthenticatedUser findAuthenticatedUserOrDie( String key, String wfid )
             if (authUser != null) {
                 return authUser;
             }
-        // TODO: Add feature flag barrier here!
-        } else if (getOidcBearerToken(httpRequest).isPresent()) {
+
+        } else if (FeatureGates.API_OIDC_ACCESS.enabled() && getOidcBearerToken(httpRequest).isPresent()) {
             UserInfo userInfo = verifyOidcBearerToken(getOidcBearerToken(httpRequest).get());
 
             // TODO: Only usable for OIDC users for now, just look it up via the subject.