Hello,
In anticipation of DP2, I’m preparing an external service under juriclab.org, run by my group at the University of Washington, that will provide added-value data products, tools, and data access methods primarily aimed for the Solar System community. Some provided products will be derived from proprietary Rubin data, so access to those will need to be limited only to rights holders only.
My understanding is that the way to do this is to register the service as an OIDC relying party with Rubin’s Gafaelfawr identity provider. My test client is available at:
https://auth.juriclab.org/rubin/
Requested configuration:
Client name: JuricLab Rubin Products and Tools
Grant type: authorization_code
Scopes: openid profile email rubin
Token endpoint authentication: client_secret_basic
Redirect URI: https://auth.juriclab.org/rubin/oidc/callback
I would like to request the rubin scope so that the service can use Rubin’s authorization information rather than infer access from a user’s institutional affiliation (if I understood it correctly from the documentation – please correct me if I didn’t!!).
Please advise if anything else is needed for registration, happy to provide the necessary information.
Thank you.
– Mario Juric