Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove OAuth Scopes from Authorization #270

Closed
1 task done
mkanal opened this issue Nov 10, 2023 · 2 comments
Closed
1 task done

Remove OAuth Scopes from Authorization #270

mkanal opened this issue Nov 10, 2023 · 2 comments
Assignees
@ds-ext-kmassalski
Labels
linked_to_feature Issue is linked to a feature

Comments

@mkanal
Copy link
Contributor

mkanal commented Nov 10, 2023 •
edited
Loading

As Developer
I want to get rid of any OAuth Scopes we are currently not using
so that we improve resilience and do not produce vulnerabilities

Hints / Details

Outcome / Acceptance Criteria

Outcome

  • Scope is removed from all endpoints and code. Vulnerabilities are closed because of unnecessary auth code. Get rid of unused code.

Acceptance Criteria

  • scope profile email is removed from all API endpoints

Out of Scope

  • ...
@mkanal mkanal added this to IRS Nov 10, 2023
@mkanal mkanal moved this to inbox in IRS Nov 10, 2023
@mkanal mkanal assigned jzbmw and unassigned jzbmw Nov 10, 2023
@mkanal mkanal moved this from inbox to backlog in IRS Nov 14, 2023
@mkanal mkanal moved this from backlog to next in IRS Nov 14, 2023
@ds-ext-kmassalski ds-ext-kmassalski self-assigned this Nov 14, 2023
@ds-ext-kmassalski
Copy link
Contributor

Fixed here:
catenax-ng#621

@ds-ext-kmassalski ds-ext-kmassalski moved this from next to wip in IRS Nov 14, 2023
@ds-ext-kmassalski ds-ext-kmassalski moved this from wip to review in IRS Nov 14, 2023
@mkanal mkanal moved this from review to done in IRS Nov 16, 2023
@mkanal mkanal self-assigned this Nov 16, 2023
@mkanal
Copy link
Contributor Author

mkanal commented Nov 16, 2023

PO acceptance is given as the AC are resolved and code is removed from api and code base.

@mkanal mkanal removed their assignment Nov 17, 2023
@mkanal mkanal closed this as completed Nov 21, 2023
@mkanal mkanal added the linked_to_feature Issue is linked to a feature label Jan 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ds-ext-kmassalski ds-ext-kmassalski

Labels
linked_to_feature Issue is linked to a feature
Projects
IRS
Status: done
Milestone
No milestone
Development

No branches or pull requests
3 participants
@jzbmw @mkanal @ds-ext-kmassalski