Add incoming request validation in Add Member API

Currently there are no validations on the email coming inside the request body for Azure.

Recently, we've enabled OID Validation: osdu/platform/deployment-and-operations/helm-charts-azure!783 (merged)

This will be a breaking change for AAD users: only OIDs will be accepted inside the Add member API.

Proposed Solution:

  1. Add a validation inside azure layer to do the OID Validation: If the token is issued by AAD, then the incoming value inside email parameter should be a valid OID.
  2. Graph API is going to be used to query the user information.
Edited Mar 12, 2024 by Deepa Kumari
Assignee Loading
Time tracking Loading