Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-20262

Configure the APS OAuth 2 Client Request to Use the "email" Field Instead of the "name" Field

    Details

    • Bug Priority:
      Category 4
    • ACT Numbers:

      00983068

      Description

      The customer is using Azure AD with openID Connect which uses the OAuth 2 protocol.  Their openID “name” field is configured to a user’s name but in APS, the “name” field is configured to use an email address.  In the APS method checkForTokenHeader, in Oauth2RequestHeaderService.java, when checking for “name” the expected value is an email address.  This is causing the customer's login for APS to fail.  The customer is requesting that an improvement be made so that the checkForTokenHeader can use “email” instead of “name”.

      The customer is unable to change the configuration in their Azure openID client to use an email value in the “name” field because it is a global setting and affects other clients.

      Current Behavior:  The APS method checkForTokenHeader in Oauth2RequestHeaderService.java uses “name” for the authentication process.

      Desired Behavior:  The APS method checkForTokenHeader in Oauth2RequestHeaderService.java uses “email” for the authentication process.

      References:

      /activiti-app/src/main/java/com/activiti/security/oauth2/Oauth2RequestHeaderService.java 
      /activiti-app-logic/src/main/java/com/activiti/service/api/UserService.java 

      https://docs.alfresco.com/process-services1.9/concepts/ps-app-config-OAuth-client.html 

      The customer is also requesting that a temporary solution, like an override class, be provided while the improvement Jira is being considered.

        Attachments

          Structure

            Activity

              People

              • Assignee:
                apsteam APS Team
                Reporter:
                kwatson Kimberly Watson
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:

                  Structure Helper Panel