Page MenuHomePhabricator

Investigate feasibility of only getting user's email address via OAuth when needed for a non-proxy application
Open, Needs TriagePublicSpike

Description

At the moment we fetch all user's email addresses when they log in to the library. This is largely a holdover from a time when the email addresses was absolutely required information for arranging access to every library collection.

Now, however, the majority of publishers provide access via the Proxy server, which does not require user email addresses. In this new model we don't actually need user's email addresses unless they apply to one of the partners which requires it.

Instead of always fetching user email addresses, is it possible to retrieve just their basic information on first login, and then asynchronously fetch their email address after they apply to a non-PROXY partner?

Event Timeline

Restricted Application changed the subtype of this task from "Task" to "Spike". · View Herald TranscriptJan 19 2022, 12:21 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Samwalton9-WMF renamed this task from Only fetch user's email address via OAuth when needed for a non-proxy application to Investigate feasibility of only getting user's email address via OAuth when needed for a non-proxy application.Jan 19 2022, 12:21 PM