Allow users to manage OAuth apps they own outside Django admin #93542

Closed
opened 2021-12-01 15:59:39 +01:00 by Anna Sirota · 3 comments
Owner

Goal

In order to allow people outside Blender staff to integrate Blender ID OAuth flow, a way to view and modify OAuth apps and webhooks must be introduced.
OAuth applications are already linked to Blender ID users, so could be a way to decide which accounts are allowed to view and edit which apps outside Django admin.

This also requires linking webhooks to user accounts or OAuth apps, otherwise there's no way to determine which webhooks should be allowed to be edited outside Django admin.

Specs

  • link webhooks to OAuth applications (add an optional FK);
  • add a menu and a page where OAuth applications that can be managed by currently logged in user are listed;
  • add a page where a particular OAuth application and its webhook can be edited;
    • for now limit editing to redirect URLs and webhooks URLs, other fields such as client ID/secret should be read-only.

See the screenshots:

Firefox_Screenshot_2021-12-07T17-28-17.604Z.png

Firefox_Screenshot_2021-12-07T17-27-42.994Z.png

## Goal In order to allow people outside Blender staff to integrate Blender ID OAuth flow, a way to view and modify OAuth apps and webhooks must be introduced. OAuth applications are already linked to Blender ID users, so could be a way to decide which accounts are allowed to view and edit which apps outside Django admin. This also requires linking webhooks to user accounts or OAuth apps, otherwise there's no way to determine which webhooks should be allowed to be edited outside Django admin. ## Specs - link webhooks to OAuth applications (add an optional FK); - add a menu and a page where OAuth applications that can be managed by currently logged in user are listed; - add a page where a particular OAuth application and its webhook can be edited; - for now limit editing to redirect URLs and webhooks URLs, other fields such as client ID/secret should be read-only. See the screenshots: ![Firefox_Screenshot_2021-12-07T17-28-17.604Z.png](https://archive.blender.org/developer/F12704858/Firefox_Screenshot_2021-12-07T17-28-17.604Z.png) ![Firefox_Screenshot_2021-12-07T17-27-42.994Z.png](https://archive.blender.org/developer/F12704859/Firefox_Screenshot_2021-12-07T17-27-42.994Z.png)
Anna Sirota self-assigned this 2021-12-01 15:59:39 +01:00
Author
Owner

Changed status from 'Needs Triage' to: 'Confirmed'

Changed status from 'Needs Triage' to: 'Confirmed'
Author
Owner

Added subscriber: @railla

Added subscriber: @railla
Author
Owner

Changed status from 'Confirmed' to: 'Resolved'

Changed status from 'Confirmed' to: 'Resolved'
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: infrastructure/blender-id#93542
No description provided.