Change grant method from prompt to auto in the logviewer-proxy-client
The OAuthClient logviewer-proxy-client used in front of the logviewer application is prompting the users to grant permissions of their account to Openshift. This message is confusing the users who are afraid that the application is asking full access to their NICE account (and imo they are rightfully afraid as there is no information that the access they are granting is restricted to the Openshift realm). To avoid confusion we should use the auto
grantMethod instead and avoid this prompt alltogether:
This is due to the fact that we had to configure the scoped tokens to user:full
, by allowing read/write
access to the API. Unfortunately, there is no other way to allow only read
access to the API. See https://docs.okd.io/latest/authentication/tokens-scoping.html#scoping-tokens-user-scopes_configuring-internal-oauth for further info.
This is the second request from a worried user: https://cern.service-now.com/nav_to.do?uri=u_request_fulfillment.do?sysparm_query=number=RQF1760518
Btw. The user is now asking us to read the logs for him as he doesn't want to give the permission grant ...
/cc @alossent