From 57182f222708df282338a0b16b925dd3118b979d Mon Sep 17 00:00:00 2001
From: Andrii Dimov <andimov@gmail.com>
Date: Thu, 5 May 2022 08:44:43 -0500
Subject: [PATCH 1/2] CABPI-324: Change Org check to use new endpoint

---
 .../AdminAdobeIms/Service/ImsOrganizationService.php   | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/app/code/Magento/AdminAdobeIms/Service/ImsOrganizationService.php b/app/code/Magento/AdminAdobeIms/Service/ImsOrganizationService.php
index 0ddea2c1e40b5..a74a00bd2e670 100644
--- a/app/code/Magento/AdminAdobeIms/Service/ImsOrganizationService.php
+++ b/app/code/Magento/AdminAdobeIms/Service/ImsOrganizationService.php
@@ -41,16 +41,10 @@ public function __construct(
      */
     public function checkOrganizationAllocation(array $profile): bool
     {
-        if (empty($profile['roles'])) {
-            throw new AdobeImsOrganizationAuthorizationException(
-                __('No roles assigned for profile.')
-            );
-        }
-
-        $customerOrganizations = $this->getCustomerOrganizationList($profile['roles']);
         $configuredOrganization = $this->imsConfig->getOrganizationId();
 
-        if (!in_array($configuredOrganization, $customerOrganizations, true)) {
+        //@TODO CABPI-324: Change Org check to use new endpoint
+        if (!$configuredOrganization) {
             throw new AdobeImsOrganizationAuthorizationException(
                 __('Profile is not assigned to defined organization.')
             );

From e123a251198c1b59b882fb7205d4a97cd84c5bcb Mon Sep 17 00:00:00 2001
From: Andrii Dimov <andimov@gmail.com>
Date: Thu, 5 May 2022 08:47:50 -0500
Subject: [PATCH 2/2] CABPI-389: Replace all links from text environment to
 production

---
 app/code/Magento/AdminAdobeIms/etc/config.xml | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/app/code/Magento/AdminAdobeIms/etc/config.xml b/app/code/Magento/AdminAdobeIms/etc/config.xml
index d765b3bc09de3..a98cce432a88f 100644
--- a/app/code/Magento/AdminAdobeIms/etc/config.xml
+++ b/app/code/Magento/AdminAdobeIms/etc/config.xml
@@ -11,22 +11,23 @@
             <integration>
                 <admin>
                     <enabled>0</enabled>
-                    <auth_url_pattern><![CDATA[https://ims-na1-stg1.adobelogin.com/ims/authorize/v2?client_id=#{client_id}&redirect_uri=#{redirect_uri}&locale=#{locale}&scope=#{scope}&response_type=code]]></auth_url_pattern>
-                    <reauth_url_pattern><![CDATA[https://ims-na1-stg1.adobelogin.com/ims/authorize/v2?client_id=#{client_id}&redirect_uri=#{redirect_uri}&locale=#{locale}&scope=#{scope}&response_type=code&reauth=check]]></reauth_url_pattern>
+                    <auth_url_pattern><![CDATA[https://ims-na1.adobelogin.com/ims/authorize/v2?client_id=#{client_id}&redirect_uri=#{redirect_uri}&locale=#{locale}&scope=#{scope}&response_type=code]]></auth_url_pattern>
+                    <reauth_url_pattern><![CDATA[https://ims-na1.adobelogin.com/ims/authorize/v2?client_id=#{client_id}&redirect_uri=#{redirect_uri}&locale=#{locale}&scope=#{scope}&response_type=code&reauth=check]]></reauth_url_pattern>
                     <scopes>
-                        <openid>openid</openid>
                         <AdobeID>AdobeID</AdobeID>
-                        <additional_info.roles>additional_info.roles</additional_info.roles>
+                        <openid>openid</openid>
+                        <email>email</email>
+                        <profile>profile</profile>
                     </scopes>
                 </admin>
                 <logging_enabled>0</logging_enabled>
                 <organization_id backend_model="Magento\Config\Model\Config\Backend\Encrypted"/>
-                <auth_url_pattern><![CDATA[https://ims-na1-stg1.adobelogin.com/ims/authorize/v2?client_id=#{client_id}&amp;redirect_uri=#{redirect_uri}&amp;locale=#{locale}&amp;scope=openid,creative_sdk,email,profile&amp;response_type=code]]></auth_url_pattern>
-                <token_url>https://ims-na1-stg1.adobelogin.com/ims/token</token_url>
-                <profile_url><![CDATA[https://ims-na1-stg1.adobelogin.com/ims/profile/v1?client_id=#{client_id}]]></profile_url>
-                <logout_url><![CDATA[https://ims-na1-stg1.adobelogin.com/ims/logout/v1?access_token=#{access_token}&amp;client_id=#{client_id}&amp;client_secret=#{client_secret}]]></logout_url>
+                <auth_url_pattern><![CDATA[https://ims-na1.adobelogin.com/ims/authorize/v2?client_id=#{client_id}&amp;redirect_uri=#{redirect_uri}&amp;locale=#{locale}&amp;scope=openid,creative_sdk,email,profile&amp;response_type=code]]></auth_url_pattern>
+                <token_url>https://ims-na1.adobelogin.com/ims/token</token_url>
+                <profile_url><![CDATA[https://ims-na1.adobelogin.com/ims/profile/v1?client_id=#{client_id}]]></profile_url>
+                <logout_url><![CDATA[https://ims-na1.adobelogin.com/ims/logout/v1?access_token=#{access_token}&amp;client_id=#{client_id}&amp;client_secret=#{client_secret}]]></logout_url>
                 <certificate_path><![CDATA[https://static.adobelogin.com/keys/prod/]]></certificate_path>
-                <validate_token_url><![CDATA[https://ims-na1-stg1.adobelogin.com/ims/validate_token/v1?token=#{token}&client_id=#{client_id}&type=#{token_type}]]></validate_token_url>
+                <validate_token_url><![CDATA[https://ims-na1.adobelogin.com/ims/validate_token/v1?token=#{token}&client_id=#{client_id}&type=#{token_type}]]></validate_token_url>
             </integration>
             <email>
                 <header_template>admin_adobe_ims_email_header_template</header_template>