Skip to content

API key auth optional feature flag - #1909

Open
labkey-adam wants to merge 8 commits into
developfrom
fb_apikey_auth
Open

labkey-adam wants to merge 8 commits into
developfrom
fb_apikey_auth

Conversation

@labkey-adam

Copy link
Copy Markdown
Contributor

labkey-jeckels
labkey-jeckels previously approved these changes Sep 29, 2026
Comment thread onprc_ehr/test/src/org/labkey/test/tests/onprc_ehr/ONPRC_SsrsSessionKeyTest.java Outdated
@labkey-jeckels

Copy link
Copy Markdown
Contributor

We need to make sure that this gets enabled as part of the upgrade, either via a user education handoff or possibly via an upgrade script.

@labkey-martyp labkey-martyp left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to make sure that this gets enabled as part of the upgrade, either via a user education handoff or possibly via an upgrade script.

Yes I think an upgrade script would be preferred as this will not be in production likely until well into 2027. Handling it now in a script ensures this is taken care of far down the road.

@labkey-adam

Copy link
Copy Markdown
Contributor Author

We need to make sure that this gets enabled as part of the upgrade, either via a user education handoff or possibly via an upgrade script.

Yes I think an upgrade script would be preferred as this will not be in production likely until well into 2027. Handling it now in a script ensures this is taken care of far down the road.

Due to security concerns, we want this off by default. I think a core upgrade script would be ill-advised. I could accept ONPRC- and SNPRC-specific upgrade scripts, but ONPRC (at least) will need to take another step: migrating to use the apikey parameter instead of LabKeyTransformSessionId. Communication by us and action by them will still be required.

labkey-jeckels
labkey-jeckels previously approved these changes Sep 30, 2026
Comment thread onprc_ehr/test/src/org/labkey/test/tests/onprc_ehr/ONPRC_SsrsSessionKeyTest.java Outdated
…eset optional feature. This way, it's not affected by signOut in the test.
@labkey-adam

Copy link
Copy Markdown
Contributor Author

@labkey-jeckels not sure how I "dismissed" your review, but I guess I did

}
finally
{
OptionalFeatureHelper.resetOptionalFeature(cn, API_KEY_OPTIONAL_FEATURE_FLAG);

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've been warned in other scenarios about doing work in finally blocks. @labkey-tchad is this OK?

@labkey-jeckels labkey-jeckels left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Worth a confirmation on the try/finally approach before merging

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants