OAuth extension - update\add logic of userCanSeeSecret() method of Backend\ConsumerAcceptance class.
Open, Needs TriagePublic
Actions

Description

For now the method ConsumerAcceptance::userCanSeeSecret() just returns a message object and does not have any logic inside.
So permission check should be added.

The task is related to T264457: Client secret shared between clients and depends on the final solution of that task.

Related Objects

Mentioned Here: T264457: Client secret shared between clients

Event Timeline

Art.tsymbar created this task.Oct 13 2020, 1:59 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 13 2020, 1:59 PM

Peter.ovchyn removed Art.tsymbar as the assignee of this task.Oct 21 2020, 12:35 PM

Assigned it just for review actual status, as it located in S&F Workboard.

roman-stolar claimed this task.Aug 29 2022, 2:18 PM

VirginiaPoundstone moved this task from Backlog to To be discussed on the Core Platform Team Initiatives (API Gateway) board.Mar 15 2023, 10:52 PM

As API Gateway is nowadays owned by serviceops, adding the serviceops project tag to open API Gateway tasks tagged with the deprecated/archived "Platform Team Initiatives (API Gateway)" tag at https://phabricator.wikimedia.org/project/profile/4321/, as part of Phabricator Housekeeping.

Tgr updated the task description. (Show Details)Apr 1 2024, 6:33 PM

Tgr updated the task description. (Show Details)

OAuth extension - update\add logic of userCanSeeSecret() method of Backend\ConsumerAcceptance class.Open, Needs TriagePublicActions

Description

Related Objects

Event Timeline

OAuth extension - update\add logic of userCanSeeSecret() method of Backend\ConsumerAcceptance class.
Open, Needs TriagePublic
Actions