Comments (4)
rpaw053
commented on July 23, 2024
Edited task to make clear that the access is given by the Hub Admin, and this is resolved.
GH-31 describes the store, the "Can Use Api" flag enforced privilege
from nz-orcid-hub.
rpaw053
commented on July 23, 2024
Hmmn, I'm reminded that Govt Org's under one of the open govt or data frameworks would need this facility.
Should the hub ever shut down (forbid), there has to be a mechanism for the Orgs to get their access tokens out.
by jgus614from nz-orcid-hub.
rpaw053
commented on July 23, 2024
If that "make use of Access token in future" has an implicit "through the ORCID Hub" then totally. If it's download a copy of my researchers tokens for my other integration, then would disagree as I'm not sure it's desirable for RO Admins to be able to interact directly with tokens.
Remember each Member has 5 sets of credentials, so rather then increasing the attack surface of the token store, we could sensibly recommend/insist that orgs wanting tokens for their own integrations get direct permission. This would make privacy sense too.
from nz-orcid-hub.
rpaw053
commented on July 23, 2024
The privileges can be managed through DB constraints and through Code, Simple API can be written if needed.
by rpaw053from nz-orcid-hub.
Related Issues (20)
- Work contributors erroring at ORCID unless contributor-attributes is fully populated
- Other ID task requires a valid visibility to be present
- Peer review upload requires an external-id-relationship for subject which ORCID doesn't
- QoL improvements for new keywords webform
- Flask-OAuthlib error when running flask commands HOT 2
- Other-IDs task requires a URL when the ORCID model doesn't HOT 5
- flask-admin: need to break down into separate chunks the changes added to flask-admin
- User with two emails responding to invite should over-write email rather than be locked out HOT 7
- Research Resource Proposal End Date errors when empty HOT 2
- To improve rating we need to remove support for TLS 1.0/1.1 HOT 1
- Document getssl application for setting and renewing server certificates
- UnicodeDecodeError with orcid_proxy HOT 2
- Add filter to View/Export People screen
- Leaking email addresses to Google
- Enable assertion of funded-by relationships in V3 work items
- Enable assertion-origin values in source HOT 1
- Renable parameter passing in API credential requests. HOT 1
- Upgrade solution to work with Python 3.10 HOT 2
- User Story: Merge user accounts HOT 2
- How to action a PUT to the Hub's API via the API? HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nz-orcid-hub.