Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Finetune requirements and documentation of using client credentials with openeo #630

Open
soxofaan opened this issue Sep 30, 2024 · 2 comments

Comments

@soxofaan
Copy link
Collaborator

soxofaan commented Sep 30, 2024

With #624 a new doc page was added explaining some CDSE openEO authentication details, including the feature of using the client credentials created from the SentinelHub dashboard app:
https://documentation.dataspace.copernicus.eu/APIs/openEO/authentication.html#obtaining-client-credentials

The Sentinel Hub service in the Copernicus Data Space Ecosystem
has a [dashboard web app](https://shapps.dataspace.copernicus.eu/dashboard)
and under the account settings there is a self-service feature to
[register your own OAuth client](../SentinelHub/Overview/Authentication.qmd#registering-oauth-client){target="_blank"}.
The client id and client secret obtained here can also be used
for the client credentials flow with the openEO service of Copernicus Data Space Ecosystem.

This section is intentionally a bit vague at the moment, and needs some more finetuning.

For example from @rahmandawibowo-vito I learned that it's not immediately possible to "link" the client credentials with a user account, the user first has to run a batch job with these client credentials, so that an account for this client is created in the marketplace.

What also needs some clarification I think is how credits are associated, how they are linked (or not) between user and client, and how it is represented in the marketplace.

cc @rahmandawibowo-vito @JanssenBrm

@soxofaan
Copy link
Collaborator Author

soxofaan commented Oct 9, 2024

FYI: with #636 I added this section to the CDSE docs on how to get the OIDC "sub" identifier of a service account: https://documentation.dataspace.copernicus.eu/APIs/openEO/authentication/client_credentials.html#obtain-the-oidc-identifier-of-a-service-account

@soxofaan
Copy link
Collaborator Author

soxofaan commented Oct 9, 2024

related (internal) cross-reference: MKTP-471

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant