fix: missing server_metadata

backend/common/corpora_config.py

@@ -88,6 +88,7 @@ def get_defaults_template(self):
  "internal_url": "{api_base_url}",
  "issuer": [],
  "retry_status_forcelist": [429, 500, 502, 503, 504],
+ "server_metadata_url": "{api_base_url}/.well-known/openid-configuration",
  }
  template["issuer"].append(self.api_base_url + "/" if not self.api_base_url.endswith("/") else self.api_base_url)
  template["issuer"].append("https://" + self.auth0_domain + "/")

backend/portal/api/app/v1/authentication.py

@@ -50,6 +50,7 @@ def get_oauth_client(config: CorporaAuthConfig) -> FlaskRemoteApp:
  authorize_url=config.api_authorize_url,
  client_kwargs={"scope": "openid profile email offline_access write:collections"},
  authorize_params={"audience": config.api_audience},
+ server_metadata_url=config.server_metadata_url,
  )
  return oauth_client
 

tests/functional/backend/corpora/test_collection_access.py

@@ -59,7 +59,10 @@ def test_nocollection_access(session, api_url, nocollection_cookie):
 
 
 def test_collection_access(session, api_url, supercurator_cookie, curator_cookie):
- """Test that only a super curator has access to all of the collections"""
+ """Test that only a super curator has access to all of the collections
+
+ Note: Sometimes this fails if the rdev environment was not created properly. Rebuilding the rdev environment to fix.
+ """
  # get collection for supercurator user
  headers = {"Cookie": f"cxguser={supercurator_cookie}", "Content-Type": "application/json"}
  res = session.get(f"{api_url}/dp/v1/collections", headers=headers)