Add incoming request validation in Add Member API
Currently there are no validations on the email coming inside the request body for Azure.
Recently, we've enabled OID Validation: osdu/platform/deployment-and-operations/helm-charts-azure!783 (merged)
This will be a breaking change for AAD users: only OIDs will be accepted inside the Add member API.
Proposed Solution:
- Add a validation inside azure layer to do the OID Validation: If the token is issued by AAD, then the incoming value inside email parameter should be a valid OID.
- Graph API is going to be used to query the user information.
Edited by Deepa Kumari