4 24 2023 Tech Team Report - QualitativeDataRepository/TechnicalTeam GitHub Wiki

4-24-2023

Logged Tasks

                            Date             Task Hours (Main) Hours (EOLS) Hours (PII) Hours (QDAS)
17-Apr-2023 Reporting, coord re a11y on stage, fix a11y issues on stage, investigate/fix license description issue/report at IQSS, meeting 4
18-Apr-2023 Test DV build/deploy, fix a11y link issues in footer, write HEAL abstract 2
19-Apr-2023 Send HEAL/SSO abstract, investigate Drupal security update, deploy to dev/stage, coord re prod deployment, test Dataverse build, report success. 1
21-Apr-2023 SSO-Add auto create/auto convert to OIDC login in Dataverse, investigate/fix duplicate account creation in Drupal, handle no optIn setting, investigate/fix Google login, test sync to LDAP account. Start investigating Google only. 7
22-Apr-2023 Work on fixing Oauth tests 1
23-Apr-2023 Finish fixing tests 1

SSO

  • Add auto-create/auto-convert internal users in Dataverse
  • Investigate/fix duplicate account creation in Drupal (from email typo in db)
  • Handle accounts with no optIn setting (should be only on dev)
  • Investigate/fix Google login, test association with LDAP account (works)
  • Start investigating new OIDC/Google accounts - requires developing registration in Keycloak, possibly with their preview declarative profile functionality, or redirecting to Drupal Reg page to complete form.
  • Fix OAuth2 code/tests so that all tests pass
  • Wrote/submitted HEAL/SSO abstract to DCM 2023 mtg

Drupal

  • Investigate Drupal security update, deploy to dev/stage

Dataverse

  • Fix accessibility issue by underlying just low-contrast links
  • Test DV build/deploy process (works)
  • Investigate/fix license description issue, report to IQSS

AnnoRep

Operations

Discussion

  • With the latest additions, it is now possible to create/use internal accounts on dev via OIDC and, if I add an email to our list of test users on Google, to login via Google and have it log you into an existing account with that email.

Plans

  • SSO - continue to explore/build OIDC options
    • Investigate ways to simplify user interface (multiple clicks to get through Keycloak)
    • Restore redirect to current page after login
    • Investigate creating a new account via Keycloak, i.e. starting from a Google or ORCID account
    • Try ORCID?
    • Investigate automating recovery from Drupal logged in /Keycloak&Dataverse logged out
  • Matomo - help with transition from Google
  • AnnoRep - explore round-trip, configure auto-start and log rotation
  • Dataverse
    • Make PR for accessibility fix (once finalized)
    • Make PR for guestbook adding datasetversion fix, deploy to stage
    • Continue towards guestbook at request based on ADA's original work
    • Popup info accessibility - IQSS likes the recommendations from the source I linked to, so this can be implemented along those lines.
  • Drupal - v10 - review compatibility and start updates.
  • QDAS Previewer
    • Updates per request
    • Investigate writing aux file/previewing lower-sensitivity version and/or other write options
  • TBD: FRDR Security