You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is a switch in Frontend that controls whether we use Okta as the source of truth for a logged in user, or whether we use cookies.
Identity & Trust are removing the ability to authenticate the /me endpoints using cookies. Okta will be the only means of authenticating, and hitting their services should be the only way of accessing user data.
This means we should remove the mechanism by which we were able to extract user data from the GU_U user cookie.
Not all of this will be on the menu for WebX and we should agree with I&T, as well as other teams, how much we can take on.
Some pressed pages (example) and pressed interactives use older DCR or frontend JavaScript bundles that still rely on cookies. On these pages, the JavaScript would no longer be able to verify that the user is logged in (they were pressed before our integration with Okta was established), and there may be some impact on the user experience as a result. For example, it's likely that these pages would not show the "My account" dropdown menu. I expect that we would instead show a "Sign in" link, but we'd need to verify this.
The text was updated successfully, but these errors were encountered:
There is a switch in Frontend that controls whether we use Okta as the source of truth for a logged in user, or whether we use cookies.
Identity & Trust are removing the ability to authenticate the
/me
endpoints using cookies. Okta will be the only means of authenticating, and hitting their services should be the only way of accessing user data.This means we should remove the mechanism by which we were able to extract user data from the
GU_U
user cookie.For example, we could remove:
Not all of this will be on the menu for WebX and we should agree with I&T, as well as other teams, how much we can take on.
Some pressed pages (example) and pressed interactives use older DCR or frontend JavaScript bundles that still rely on cookies. On these pages, the JavaScript would no longer be able to verify that the user is logged in (they were pressed before our integration with Okta was established), and there may be some impact on the user experience as a result. For example, it's likely that these pages would not show the "My account" dropdown menu. I expect that we would instead show a "Sign in" link, but we'd need to verify this.
The text was updated successfully, but these errors were encountered: