Adding GUID to UserProfile #94
Labels
architecture
kind/analysis
kind/user-story
Used for issues that describes functionality for our users.
status/draft
Status: When you create an issue before you have enough info to properly describe the issue.
Description
Today, a UserProfile has an int32 primary that is used for ID, which anyone can easily iterate over.
In Altinn 2 a new unique ID has been added to the authentication userprofile: UserUUID
This will be used for identifying the recipient when navigating from Altinn 2 to Altinn 3 UI when delegating rights to the user.
The update input and lookup for the internal API endpoint for lookup of UserProfile:
POST profile/api/v1/internal/user
Additional Information
Delegating rights to users will be possible with
But this will be handled by access-management
Tasks
Acceptance Criteria
It is possible to identify a user without needing to have ssn/lastname, and it is not guessable.
The text was updated successfully, but these errors were encountered: