Skip to content

Add openid scope analytics#11864

Merged
Sgtpluck merged 1 commit intomainfrom
dmm/add-openid-scope-data
Feb 11, 2025
Merged

Add openid scope analytics#11864
Sgtpluck merged 1 commit intomainfrom
dmm/add-openid-scope-data

Conversation

@Sgtpluck
Copy link
Contributor

🎫 Ticket

Add analytics to track integrations not passing openid in the scope parameter

🛠 Summary of changes

OIDC requests are supposed to have an openid scope value in order to conform to the spec. We currently do not have a validation for that value, so many integrations not passing it through. This ticket is to add tracking to the weekly protocols report to get a list of integrations that are not conforming, so we can do targeted outreach to get them to update their requests.

I have tested that the cloudwatch query is valid via:

aws-vault exec prod-power -- bundle exec rails runner lib/reporting/protocols_report.rb --date 2025-02-09

@vrajmohan
Copy link
Contributor

vrajmohan commented Feb 10, 2025

Are we sure this is happening? I thought the string openid itself was one of the required scopes. I see that you are saying that already.

Copy link
Contributor

@vrajmohan vrajmohan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Glad that we are still plugging away on this front.
Looks good to me.

@Sgtpluck Sgtpluck merged commit 2f0b7e5 into main Feb 11, 2025
2 checks passed
@Sgtpluck Sgtpluck deleted the dmm/add-openid-scope-data branch February 11, 2025 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants