Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove option to retrieve user identity from cookie #13020

Open
SiAdcock opened this issue Dec 16, 2024 · 0 comments
Open

Remove option to retrieve user identity from cookie #13020

SiAdcock opened this issue Dec 16, 2024 · 0 comments

Comments

@SiAdcock
Copy link
Contributor

SiAdcock commented Dec 16, 2024

There is a switch in Frontend that controls whether we use Okta as the source of truth for a logged in user, or whether we use cookies.

Identity & Trust are removing the ability to authenticate the /me endpoints using cookies. Okta will be the only means of authenticating, and hitting their services should be the only way of accessing user data.

This means we should remove the mechanism by which we were able to extract user data from the GU_U user cookie.

For example, we could remove:

Not all of this will be on the menu for WebX and we should agree with I&T, as well as other teams, how much we can take on.

Some pressed pages (example) and pressed interactives use older DCR or frontend JavaScript bundles that still rely on cookies. On these pages, the JavaScript would no longer be able to verify that the user is logged in (they were pressed before our integration with Okta was established), and there may be some impact on the user experience as a result. For example, it's likely that these pages would not show the "My account" dropdown menu. I expect that we would instead show a "Sign in" link, but we'd need to verify this.

@SiAdcock SiAdcock converted this from a draft issue Dec 16, 2024
@SiAdcock SiAdcock added this to the Health milestone Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Sprint Candidates
Development

No branches or pull requests

2 participants