-
Notifications
You must be signed in to change notification settings - Fork 35
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
keycloak: handle change of email #584
Labels
Projects
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The email change of a user logged in with Keycloak is currently not correctly handled by REANA.
Let's consider an user with email
[email protected]
. When logging in for the first time, a new user is created both in Invenio's and in REANA's tables, with the correct email:If this user changes his email, for example to
[email protected]
, then a new user is created in REANA's table, while Invenio keeps using the old user. Given that authentication in reana-ui is handled by Invenio, the user is still able to see his workflows and to use his access token.However, REANA should not create a new user with the new email provided by Keycloak. We should also check whether it is necessary to update the email in REANA's user table.
The text was updated successfully, but these errors were encountered: