Skip to content

gplazma2-oidc: Add and test support for storage.poll WLCG claim#8089

Open
greenc-FNAL wants to merge 1 commit into11.2from
fix/11.2/RB-14675
Open

gplazma2-oidc: Add and test support for storage.poll WLCG claim#8089
greenc-FNAL wants to merge 1 commit into11.2from
fix/11.2/RB-14675

Conversation

@greenc-FNAL
Copy link
Copy Markdown
Contributor

Motivation:

JWT Profiles 1.2 describes a new claim, storage.poll intended for obtaining online/nearline status of files without requiring full read access. We wish to add support for that claim.

Modification:

  • POLL("storage.poll", true, READ_METADATA) is added to WlcgProfileScope.
  • Unit tests are added to WlcgProfileScopeTest.java.

Result:

READ_METADATA operations are authorized for requestors without read access if the requestor provides a token with the storage.poll claim.

Target: master
Request: 11.2
Patch: https://rb.dcache.org/r/14675/diff/raw/
Closes:
Requires-notes: yes
Requires-book: no
Acked-by:

  • Tigran Mkrtchyan
  • Dmitry Litvintsev

Motivation:

[JWT Profiles 1.2](https://github.com/WLCG-AuthZ-WG/common-jwt-profile/blob/master/v1.2/profile.md) describes a new claim, `storage.poll` intended for obtaining online/nearline status of files without requiring full read access. We wish to add support for that claim.

Modification:

- `POLL("storage.poll", true, READ_METADATA)` is added to `WlcgProfileScope`.
- Unit tests are added to `WlcgProfileScopeTest.java`.

Result:

`READ_METADATA` operations are authorized for requestors without read access if the requestor provides a token with the `storage.poll` claim.

Target: master
Request: 11.2
Patch: https://rb.dcache.org/r/14675/diff/raw/
Closes:
Requires-notes: yes
Requires-book: no
Acked-by:
  - Tigran Mkrtchyan
  - Dmitry Litvintsev
Copilot AI review requested due to automatic review settings April 22, 2026 20:26
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds support in the gplazma2-oidc WLCG profile scope parsing/authorization logic for the storage.poll scope described in WLCG JWT Profiles 1.2, enabling metadata/status queries without granting read/download permissions.

Changes:

  • Add POLL("storage.poll", true, READ_METADATA) to WlcgProfileScope.Operation.
  • Improve the “missing path” validation message to include the operation label.
  • Add unit tests covering identification, parsing, and invalid forms of storage.poll.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
modules/gplazma2-oidc/src/main/java/org/dcache/gplazma/oidc/profiles/WlcgProfileScope.java Introduces the new storage.poll operation (mapping to READ_METADATA) and clarifies the error message when a required path is missing.
modules/gplazma2-oidc/src/test/java/org/dcache/gplazma/oidc/profiles/WlcgProfileScopeTest.java Adds test coverage for recognizing and parsing storage.poll scopes, plus validation of invalid/relative-path variants.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants