Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deleting OTP user deletes Auth0 profile, even if an AdminUser or ApiUser. #134

Open
binh-dam-ibigroup opened this issue Jan 29, 2021 · 0 comments

Comments

@binh-dam-ibigroup
Copy link
Collaborator

Observed behavior

Deleting an OtpUser that is also an ApiUser or AdminUser deletes the Auth0 profile, so that the remaining ApiUser and AdminUser associated with that profile can no longer log in.

Expected behavior

On deleting a user, the Auth0 profile should be deleted only if no other ApiUser/AdminUser/OtpUser is attached to it.

Steps to reproduce the problem

  1. Create an Auth0 profile.
  2. Create an AdminUser, an ApiUser, and an OtpUser with the same email.
  3. Using the admin UI, delete the OtpUser.
  4. Try login into the admin UI using the same email. Login will fail.

Any special notes on configuration used

NA

Version of otp-middleware and/or OpenTripPlanner if applicable (exact commit hash or branch name)

Latest dev branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant