This API call allows the gocd server to make sure that users still have appropriate authorization to access gocd — so you must implement it if you want to be using API tokens for web based auth plugins.
- Ketan On Wed, Jul 15, 2020 at 12:27 PM Helge Walter <[email protected]> wrote: > Hello Kritika, > > thank you for your fast reply. > I missed that I have to implement the is-valid-user call to get the "API > call feature" for the users. I avoided to implement this because it is a > little bit complicated in our organization to get the introspection > endpoint access. Now I have to do this nevertheless. > > Regards, > Helge > > Am Mittwoch, 15. Juli 2020 08:01:09 UTC+2 schrieb Kritika Singh: >> >> Hello Helge, >> >> Personal access tokens can be created using web based logins. For this >> the plugins would need to implement Authorization Extension v2 >> <https://plugin-api.gocd.org/current/authorization/>, specifically the ' >> is-valid-user >> <https://plugin-api.gocd.org/current/authorization/#is-valid-user>' call. >> You would need to check with the plugin provider for the update plugin. >> >> Thanks >> Kritika >> >> On Wednesday, July 15, 2020 at 11:17:05 AM UTC+5:30 [email protected] >> wrote: >> >>> Hello, >>> >>> in our environment we use a web based login for the corporate single >>> sign-on system. I want to provide GoCD API access to the users but it is >>> not possible for the users to create a personal access token: >>> Creation of access token is not supported by the plugin >>> cd.go.authorization.oidc. >>> >>> Creation of the access token is only possible for users created locally >>> using the Password File Authentication Plugin. >>> Is it somehow possible to allow creation of personal access tokens for >>> users with web based logins? >>> >>> Regards, >>> Helge >>> >>> PS: I do not see any function in the Authorization Plugin API which >>> allows to specify whether or not the plugin allows creation of personal >>> access tokens .. So I think this problem is related to the kind of >>> authorization and not specific to the plugin implementation itself. Am I >>> right? >>> >> -- > You received this message because you are subscribed to the Google Groups > "go-cd" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/go-cd/dc8a583d-0e22-4f6d-9f83-9a6e74cda922o%40googlegroups.com > <https://groups.google.com/d/msgid/go-cd/dc8a583d-0e22-4f6d-9f83-9a6e74cda922o%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/go-cd/CAMUPJd4z6fNC60t_XWOEYoqsdby7MFTytaWM1aJkmT%2B64BPDbw%40mail.gmail.com.
