VATSIM Connect Discussion

[Zach Biesse-Fitton]

Hi webmasters,

If you have questions about the new VATSIM Connect (SSO) system, please post them here.

More information about VATSIM Connect can be found in the following thread: 

https://forums.vatsim.net/topic/26902-new-sso-vatsim-connect-update/

Enjoy!

[Sebastian Kramer]

Hey,

 

first off all thanks for the great work you are doing.

 

Just one little question about the new Connect system.

In the documentation it lists some development accounts that can be used. But I can't figure out a way to activate a local or demo environment.

Maybe someone has an idea?

[Harrison Scott]

Hi Sebastian, 

Thanks for bringing this up. The demo accounts are for use within the demo environment which is located at http://auth-dev.vatsim.net 

To get a set of OAuth credentials, login with any of the demo accounts listed in the documentation and click view "VATSIM Connect Demo" then OAuth. When making requests, utilise http://auth-dev.vatsim.net in place of https://auth.vatsim.net. 

If you have any issues let us know.

Cheers

Harrison

[Wildan Gunawan]

In the documentation at step 2, I expect the answer from VATSIM after user authorize access is: scopes, token_type, expires_in, access_token, and refresh_token. But, I don't get that in the actual answer, I get anything but scopes.

Both auth-dev.vatsim.net and auth.vatsim.net return the same result.

Is it a bug or it's actually like that?

Edited April 14, 2020 at 03:31 AM by Wildan Gunawan

[Harrison Scott]

Hi @Wildan Gunawan,

It should definitely should return the scopes. I'll look into the issue this evening and let you know in this thread when the issue has been rectified.

Cheers

Harrison

[Wildan Gunawan]

@Harrison Scott,

Thank you Harrison. I did the command using CURL inside PHP, but it doesn't give the scope.
Here is the result I get: https://pastebin.com/nKqeVRUh

[Harrison Scott]

Hi @Wildan Gunawan,

The changes are live within the development environment, let me know if you have any issues. 

I'd expect them to be in production this evening.

Cheers

[Wildan Gunawan]

Tested and it works like a charm. Thank you!

[Mike Welten]

Great, new SSO Platform, thanks a lot for the work!

Would it be possible to add the following information in the return as well?

- Active/Inactive Account
- Suspended Yes/No
- ATC Rating (before I1/I3/SUP/ADM)
- VATSIM-Registration Date
- Subdivision Assignment Date (don't know if available)

- ATC Hours (Total and per rating)
- PILOT Hours (Total)

- Last Online ATC (Date/Time Callsign)
- Last Online PILOT (Date/Time Callsign)

Once again, thanks for the work and for considering.

Best regards
Mike

[Calum Towers]

Similar to @Mike Welten I would be keen to see a little more data in the return. Post above covers it pretty well.

As it stands, I am going to have to fire off an API call as part of the auth flow to gather some of the basic user data (e.g. their rating). We use this to immediately cascade their account into our other services (e.g. Training System, Forum etc) and to be able to tailor their experience to their use case. Visitors see a different homepage to home members for example.

[Calum Towers]

15 hours ago, Calum Towers said:

Similar to @Mike Welten I would be keen to see a little more data in the return. Post above covers it pretty well.

As it stands, I am going to have to fire off an API call as part of the auth flow to gather some of the basic user data (e.g. their rating). We use this to immediately cascade their account into our other services (e.g. Training System, Forum etc) and to be able to tailor their experience to their use case. Visitors see a different homepage to home members for example.

Excuse my slight ignorance, I wasn't requesting all of the scopes we needed! So we now have most of the data we need.
@Mike Welten - You should be able to determine active/inactivate and banned/unbanned should be available under the vatsim dataset of the return (using the vatsim_details scope).

Could still do with the user's reg date if possible!

[Mike Welten]

I don't think so, just checked the return of the User with 10000011 auth-dev, he should be suspended according the documentation.
I can't find any information which was requested above, or do I miss something?

[Blake Nahin]

It seems that after redirecting back from VATSIM, if successful, the return URL does not include the state parameter. It only has code. The state parameter is only included if access is denied.

(Reposted from the other forum since it seems this is where questions should be)

[Daniel Lange]

I've a question if the auth-dev accounts could be configured to have unique e-mails? Many services (that's not made by us, for instance forum software) use e-mail as the unique key to identify users. It becomes a bit tricky to test with when all auth-dev accounts 10000002, 10000003 and so on are the same email and we want to test 🙂

[Harrison Scott]

Hi Guys,

@Mike Welten We could facilitate Active/Inactive, Reg Date and suspended (Should be their rating, I'll investigate the demo account). For information pertaining to time online etc.. I invite you to take a look at the new VATSIM API here. 

@Calum Towers Reg date can certainly be added, I'll add it to the list.

@Blake Nahin I'll investigate the issue and get back to you.

@Daniel Lange I'll change the emails on the dev accounts to facilitate using emails as the unique key.

 

Thanks for your feedback on Connect, I'll get back to you all ASAP.

Cheers

Harrison

[Daniel Lange]

Not sure if this is just me, but I've tried this across two different services and experience the same. When I try to test giving insufficient data access (where the user ticks off which scopes to share) on auth-dev, it just redirects to auth (production) login and not back to my service. Could it be that auth-dev just have a small misconfig? 🙂 

Pretty much reproduce this by logging in with ticking off any scope.

[Zach Biesse-Fitton]

@Harrison Scott WIll take a look 😄

[Harrison Scott]

@Daniel Lange Thanks for pointing that out! I'll get it fixed this evening.

Cheers

[Daniel Lange]

Is there any news on the unique email addresses for the auth-dev accounts? 🙂 Could you perhaps simultaneously make the names unique as well? For instance "Web One", "Web Twelve" or something?

 

[Nestor Perez]

That doesn’t represent the live system accurately though. All PR accounts have the same email addresses and names, as do many duplicate ones too. Both of these are able to use Connect and log into an application unless the app itself restricts it.

It’s not my choice to modify it or not, but I do think having it like this in the development environment allows people to avoid/fix problems which could arise further down the line in production.

[Daniel Lange]

7 hours ago, Nestor Perez said:

That doesn’t represent the live system accurately though. All PR accounts have the same email addresses and names, as do many duplicate ones too. Both of these are able to use Connect and log into an application unless the app itself restricts it.

It’s not my choice to modify it or not, but I do think having it like this in the development environment allows people to avoid/fix problems which could arise further down the line in production.

Best of two worlds then? Make two of the high-level accounts (e.g. 10000009 & 10000010) have the same e-mail, rest can be unique? Because having all accounts with the same or equal addresses only aren't good test cases. 🙂 We need at least some unique accounts because majority of users on VATSIM are private users which should only have one unique account which indirectly translated to unique address as well.

[Nestor Perez]

Yep, having a bit of both worlds sounds fine 2 me!

[Harrison Scott]

Hi All,

The error when deselecting scopes has been fixed. Additionally, 9 accounts now have unique names and emails while the last two remain unchanged. The github documentation will be updated accordingly. 

If you have any issues let me know.

Cheers

[Nestor Perez]

Nice work, Harrison! 🙂

[Ilya Pyankov]

Good day everyone!

I have tried to create Vatrus Moscow FIR organization. When opening it I have:

Quote

Error Code: VSO1
Need more assistance? Pass this error code on: <unique code on each page update>

Could you clarify what is VSO1 and where to supply provided code because there were no forms on input fields are on mentioned page.

Thanks in advance!