Status of the "cla" OpenID extension #4

Open
opened 2020-09-23 11:35:36 +00:00 by abompard · 1 comment

I'm dumping this here before I forget. At the moment we have an OpenID extension called cla that will let app request whether the connecting user has signed a particular CLA. The list of predefined CLAs is in openid_cla, there's one for Fedora, one for Red Hat, one for Intel, one for Dell, one for IBM, etc.
The Ipsilon openid extension will just return {'CLA': 'yes'} if the user has signed all the requested CLAs.

It has the advantage of not informing the app of a users' other signed CLAs. In the new system they are all available through the agreements key.

Do we need to bring back this feature? Do we have an app that currently uses it and needs not to switch to OIDC?

I'm dumping this here before I forget. At the moment we have an OpenID extension called `cla` that will let app request whether the connecting user has signed a particular CLA. The list of predefined CLAs is in `openid_cla`, there's one for Fedora, one for Red Hat, one for Intel, one for Dell, one for IBM, etc. The Ipsilon openid extension will just return `{'CLA': 'yes'}` if the user has signed all the requested CLAs. It has the advantage of not informing the app of a users' other signed CLAs. In the new system they are all available through the `agreements` key. Do we need to bring back this feature? Do we have an app that currently uses it and needs not to switch to OIDC?
Author

Also, the infofas info plugin will deduce which CLAs have been signed from membership in the corresponding groups. I guess we can mimic that in the infofasjson if necessary (based on agreements this time, not group membership).

Also, the `infofas` info plugin will deduce which CLAs have been signed from membership in the corresponding groups. I guess we can mimic that in the `infofasjson` if necessary (based on agreements this time, not group membership).
rcallwoo added this to the Unified backlog project 2025-08-07 01:50:20 +00:00
Sign in to join this conversation.
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Infrastructure/ipsilon-fedora#4
No description provided.