Generate UUID for new users (UUID-5) based on user name and login-provider.

Could be dependant on changes enabling multiple providers: #24

There was discussion about making Studies a first class entity that Ego tracks.

We should work out user stories, use cases, and attempt a first pass at implementing this to see if it accomplishes what we want it to accomplish.

In Auth profile: the /token endpoint shouldn't expect an auth code to be passed
In Default profile: Need to debug why CorsFilter gives this error:

	at org.springframework.security.crypto.password.DelegatingPasswordEncoder$UnmappedIdPasswordEncoder.matches(DelegatingPasswordEncoder.java:238)
	at org.springframework.security.crypto.password.DelegatingPasswordEncoder.matches(DelegatingPasswordEncoder.java:198)
	at org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter$LazyPasswordEncoder.matches(WebSecurityConfigurerAdapter.java:593)
	at org.springframework.security.authentication.dao.DaoAuthenticationProvider.additionalAuthenticationChecks(DaoAuthenticationProvider.java:86)
	at org.springframework.security.authentication.dao.AbstractUserDetailsAuthenticationProvider.authenticate(AbstractUserDetailsAuthenticationProvider.java:166)
	at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:174)
	at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal(BasicAuthenticationFilter.java:180)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
	at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
	at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
	at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:66)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
	at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
	at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
	at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)
	at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:109)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:81)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
	at org.overture.ego.security.CorsFilter.doFilter(CorsFilter.java:48)

• got to a user that is assigned to a group
• click edit, add an application, and click save
• the application is saved, but all groups are removed
• the same happens in reverse when a user has applications, you add a group, applications will be removes

• Refactor Data Access Layer
• Add Filters based on User Status
• Change variable names to snake casing

Add Facebook Login to EGO

• logged in with google
• clicked logout button and nothing happens.
• if i refresh page, it goes to landing page then initiates login without me clicking anything
• logout button should log the user out and take them back to homepage

Objective

The goal of this ticket is to ensure that ORCID API can be integrated with DMS Portal

Steps to be performed

1. Add a new button in the login with:
2. Display the ID logo (see file: https://ndownloader.figshare.com/files/8439047 )
3. The text is "Log in with ORCID"
4. User will log in with ORCID.
5. No window popping: Redirect to the ORCID web site
6. User will log into ORCID, they will be redirected back to the DMS portal. (/orcid)
7. User now has the required permission to access the DMS portal.

How to retrieve the email address for the user is still under discussion - [TBD]

Deny /Re-consider page

In case; where the user will denies the permission to the DMS portal for third party authorization, the the following message will appear for the user: "Login has been cancelled. Please try again, or choose another log in method."

https://wiki.oicr.on.ca/display/icgcargotech/ORCID+Login+Functional+Spec

Zeplin Link

Error conditions: will be managed by ORCID

1. Email address is empty.
2. Email address not registered.
3. Wrong user name and password.

Wiki Link:

https://wiki.oicr.on.ca/pages/viewpage.action?spaceKey=OV&title=ORCID+SSO+Integration

Feedback: Close the right hand bar when no user/group selected. It looks odd whne you have a list with nothing selected, and some of the table is but off.

Expected Behaviour:

• when you first log in it is collapsed
• when you click on a user or group, it expands with that user,
• at any point a user can collapse it to view the table better

Right now, when registering a new application, we are storing the clientID and clientSecret of the new application in plaintext. We should be encrypting the secret.

The encryption algo should be AES256. No opinion on which cipher mode should be used.

Publish JWT Schema for JWT issued by EGO

Required for: overture-stack/website#19

• When on a smaller screen, the white panel on the white panel on the left does not scroll down.
• it should be scrollable

When you create user, date created is not logged. When a user is created this way, saving any edits or disabling the user does not work. The disable/save buttons will spin indefinitely when clicked in this case.

This should live in a repo in kids first.

We want to deploy the ego service to AWS for use in development and we want to make use of the AWS RDS.

• PostgreSQL support in ego
• Deploy ego to EC2 instance
• Provision PostgreSQL in AWS RDS

Secure portal / Auth (EGO login) as discussed at the planning meeting.

Create API endpoints to assign users to different groups

• Create a PATCH endpoint in users to add groups
• Create Endpoints to do CRUD operations on groups

• Enable Ego project in Circle CI
• Add .circleci/config.yml
• Add deployment config step for develop branch to demo server
• Add deployment script configurable via environment variables
• Add environment variable script template
• Configure demo server to execute environment variable script

• Front-End
• Back-end

https://demo.ego.kfdrc.org/users/000 currently returns 200 with a blank body

The goal of this is to have a publicly available instance of Ego with which any user can log into an play with.

Tasks

• Allow users to log in and be assigned admin rights
• Do not persist users logging in to Ego into the Users table (to preserve privacy of users interacting with the demo)
• Make behavior mentioned above toggle-able from a config value inside the application.yml
• Script to auto-populate database with dummy users
• Cronjob that refreshes the user database nightly to clean database of changes from users

Resources

Ego Source Code
Ego UI Source Code

• Go to Group page
• click a group
• click edit
• click to add a user
• click on a user and the page will crash and just be blank instead of adding the user

All other table fields are sortable, but status is not

Status field should be sortable like other table fields

• go to users
• select page 1 on pagination at bottom
• select page 3 on pagination at bottom. the users are not shifted according to the pagination. Are there really 11 pages of users?
• Add a user count ( 1-10 of 75 users) to let people know how many users there are