[ENG-11994] - List user's connected identities in admin interface - #11896
Open
Vlad0n20 wants to merge 1 commit into
Open
[ENG-11994] - List user's connected identities in admin interface#11896Vlad0n20 wants to merge 1 commit into
Vlad0n20 wants to merge 1 commit into
Conversation
sh-andriy
approved these changes
Sep 2, 2026
cslzchen
requested changes
Sep 4, 2026
cslzchen
left a comment
cslzchen
left a comment
Collaborator
There was a problem hiding this comment.
For the record, per our pair/discussion:
- Handle multiple ORCiD IDs (just in case).
- After ORCiD/GDPR release, add whether each ID has access and/or refresh tokens.
- In addition, rebase and target ORCiD/GDPR feature branch until it's released, then rebase and target
develop.
Note: don't merge until ORCiD/GDPR is released
Cc @sh-andriy and @brianjgeiger
Vlad0n20
force-pushed
the
fix/ENG-11994
branch
from
September 7, 2026 13:45
646cd99 to
923bbb9
Compare
cslzchen
requested changes
Sep 10, 2026
cslzchen
left a comment
cslzchen
left a comment
Collaborator
There was a problem hiding this comment.
- Rebase on top of latest
developand re-targetdevelopfor now - Fix conflicts and unit tests if any
- (New after 26.20 release) Add information about if access or refresh token exists (don't reveal them)
- I also suggest show pending (CREATE/LINK status) identities too, this helps PO investigate ORCiD confirmation issues. Check with PO to see if they want this.
Vlad0n20
added a commit
to Vlad0n20/osf.io
that referenced
this pull request
Sep 11, 2026
Rebuilds this feature on top of develop now that the ORCID/GDPR rewrite (ENG-12132) has shipped there, per review feedback on CenterForOpenScience#11896. The old branch was based on a stale develop and mixed in commits already superseded by that rewrite; two required model methods (record_external_identity_connected, remove_external_identity) were referenced by views/tests but had gone missing along the way. - Add OSFUser.record_external_identity_connected() to log an admin entry when a user connects an external identity (ORCID), and OSFUser.remove_external_identity() to best-effort revoke the provider token, unlink the identity, and kill the user's sessions. - Wire record_external_identity_connected() into the CAS/API confirmation flows, and pop the leftover ORCID token session keys in clear_external_first_login_anonymous_session_data(). - Add an admin panel section listing a user's connected identities (with access/refresh token presence and pending CREATE/LINK status) and a control to remove one, addressing the reviewer's two follow-up asks directly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J3gjU71vvMam7QF6spzBkN
Vlad0n20
force-pushed
the
fix/ENG-11994
branch
2 times, most recently
from
September 11, 2026 14:39
d67190e to
e57784b
Compare
Vlad0n20
force-pushed
the
fix/ENG-11994
branch
from
September 11, 2026 14:43
e57784b to
abf8602
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ticket
Purpose
Changes
Side Effects
QE Notes
CE Notes
Documentation