-
Notifications
You must be signed in to change notification settings - Fork 3.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Added token grant_type in JWT payload #30519
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks. Happy to discuss any questions if any of this is not clear.
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not quite done with the review, but submitting so you can see comments.
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0014-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0014-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-add-grant-type-in-jwt-payload.rst
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One possibly-blocking comment. Thanks.
openedx/core/djangoapps/oauth_dispatch/docs/decisions/0013-mobile-migration-to-jwt.rst
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jawad-khan: This is ready from my end. Please review the ADR changes, and squash and merge if you are content. If not, I can review your questions or updates. Thanks.
|
||
# .. custom_attribute_name: create_jwt_grant_type | ||
# .. custom_attribute_description: The grant type of the newly created JWT. | ||
set_custom_attribute('create_jwt_grant_type', grant_type) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jawad-khan: [inform] I added a custom attribute in case we want to review this data in New Relic.
# TODO: Remove this broad except if proven this doesn't happen. | ||
grant_type = 'unknown-error' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jawad-khan: [inform] I changed the grant type for this error condition so we can more easily tell the difference between this issue, and an empty string in the db.
c867dca
to
42846b3
Compare
[inform] I tried rebasing, but still getting test failures. I am trying to re-run to see what happens. |
To exchange jwt with session cookies we need to determine JWT grant type in AccessTokenExchangeView. JWT only having password grant type will be allowed to exchange session. Added ADR for mobile migration to JWT authentication. LEARNER-8886
EdX Release Notice: This PR has been deployed to the staging environment in preparation for a release to production. |
EdX Release Notice: This PR has been deployed to the production environment. |
EdX Release Notice: This PR has been deployed to the staging environment in preparation for a release to production. |
EdX Release Notice: This PR has been deployed to the production environment. |
Description
To exchange jwt with session cookies we need to determine JWT grant type in AccessTokenExchangeView.
JWT only having password grant type will be allowed to exchange session.
Supporting information
JIRA Issue: https://2u-internal.atlassian.net/browse/LEARNER-8886