You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description of feature or bug
Currently, auth_user_id is assigned by matching email addresses after an OmniAuth login. This is not our long-term strategy. We need to transition to matching based on the Ldap_username or Keycloak_id.
Additionally, we need to address how users are created and synced. Our PTime sync would set auth_user_id, but fails if there is no AuthUser with the Ldap_username or Keycloak_id . Since the Ldap_username gets set on the first Keycloak login (handled in auth_user.rb), we need to shift the auth_user_id assignment logic there.
This ticket also includes a general refactoring of `auth_user.rb to clean up existing technical debt.
Additionally with the next PTime deployment a new Endpoint will be added where we can fetch a user via Ldapname or Keycloak id or Email
Caution
When deploying this a manual PTime sync will probably be mandatory
TODO
Remove existing logic that sets auth_user_id via email matching.
Implement logic to set auth_user_id via Ldap_username upon OmniAuth Keycloak login.
Ensure auth_user_id is successfully set on a user's first login.
Description of feature or bug
Currently,
auth_user_idis assigned by matching email addresses after an OmniAuth login. This is not our long-term strategy. We need to transition to matching based on theLdap_usernameorKeycloak_id.Additionally, we need to address how users are created and synced. Our PTime sync would set
auth_user_id, but fails if there is noAuthUserwith theLdap_usernameorKeycloak_id. Since theLdap_usernamegets set on the first Keycloak login (handled inauth_user.rb), we need to shift theauth_user_idassignment logic there.This ticket also includes a general refactoring of `auth_user.rb to clean up existing technical debt.
Additionally with the next PTime deployment a new Endpoint will be added where we can fetch a user via Ldapname or Keycloak id or Email
Caution
When deploying this a manual PTime sync will probably be mandatory
TODO
auth_user_idvia email matching.auth_user_idviaLdap_usernameupon OmniAuth Keycloak login.auth_user_idis successfully set on a user's first login.auth_user.rb.