Uploaded image for project: 'GPII - Global Public Inclusive Infrastructure'
  1. GPII - Global Public Inclusive Infrastructure
  2. GPII-2511

Accept PUT method at /untrusted-settings endpoint for updating preferences

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: FlowManager
    • Labels:
      None

      Description

      With the implementation of Sticky PCP, GPII app installations need to send requests to GPII Cloud for updating preferences sets. The only API provided at the cloud for this task is the PUT /preferences/:token provided by Preferences Server. However, this API end point is not secured and should only be used by the Cloud Based Flow Manager.

      Therefore, /untrusted-settings endpoint should accept PUT method for updating preferences. It will do:

      1. Verify access tokens assigned to GPII app installation clients to ensure updating requests are from authorized GPII installations;
      2. Verify the metadata that defines the limited preference set that can be updated by PCP with memory;
      3. As the received preferences at this endpoint will be a subset of the entire preferences, merge this subset with the existing preferences;
      4. Call Preferences Server end point API to perform the update with the merged preferences

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              cli@ocad.ca Cindy Qi Li
              Reporter:
              cli@ocad.ca Cindy Qi Li
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: