Skip to content

Conversation

@uwwint
Copy link
Contributor

@uwwint uwwint commented Dec 3, 2025

(Please replace this header with a description of your pull request. Please include BOTH what you did and why you made the changes. The "why" may simply be citing a relevant Galaxy issue.)
(If fixing a bug, please add any relevant error or traceback)
(For UI components, it is recommended to include screenshots or screencasts)

How to test the changes?

(Select all options that apply)

  • I've included appropriate automated tests.
  • This is a refactoring of components with existing test coverage.
  • Instructions for manual testing are as follows:
    1. create an OIDC only galaxy
    2. register a user
    3. update the users email / username
    4. login into galaxy with that user:
      The username and email are updated.

License

  • I agree to license these and all my past contributions to the core galaxy codebase under the MIT license.

@github-actions github-actions bot added area/UI-UX area/API area/auth Authentication and authorization labels Dec 3, 2025
@uwwint uwwint force-pushed the feature/oidc-update branch from 01edf2c to 0455da9 Compare December 3, 2025 05:15
@uwwint
Copy link
Contributor Author

uwwint commented Dec 3, 2025

@nuwang Can you help with this one?

Copy link
Member

@nuwang nuwang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From what I can see, this is always syncing when logging in through an OIDC client? However, since Galaxy allows multiple accounts to be connected, I'm not sure that behaviour is desirable, since users may have one primary email they prefer but have secondary accounts connected.

IMO, I think we should simplify this to use the same conditions as here: #21356
That is, update account only if enable_account_interface: false and only one login provider is configured. That way, we also don't need toast messages and can simplify that bit too.

@nuwang nuwang requested a review from ahmedhamidawan December 4, 2025 16:00
@uwwint
Copy link
Contributor Author

uwwint commented Dec 5, 2025

Agree @nuwang. Do you want me to rebase on #21356 or wait for the merge?

@nuwang
Copy link
Member

nuwang commented Dec 5, 2025

The enable_account_interface flag is alrrady presenr so i dont think we need #21356 for this.

raise exceptions.InternalServerError(message)
if commit:
session.commit()
return message
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The returned message is not used anywhere? In fact, the original code also appears to be ignoring the message it's storing, so it looks like the whole thing is unused.

@ahmedhamidawan ahmedhamidawan changed the title feat: allow OIDC to update EMAIL and username (if mapped) Allow OIDC to update EMAIL and username (if mapped) Dec 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/API area/auth Authentication and authorization area/UI-UX

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants