New features

This version introduces several new features and tracks changes in the Globus Auth API’s behavior.

• The May 6, 2020 release of the Auth API changed the ID Token and token introspection results to include linked identity data, and eliminated the need for an extra scope for viewing linked identities. The explanations have been updated to reflect these changes.
• The Session panel now allows the user to add new authentications to the current session.
• The Identities panel now allows the user to lookup any linked identity.
• Links to specific panels work if the user is not logged in. After logging in, the app goes directly to the expected panel.
• The Session panel used to require two round-trips to the Auth API, one for introspection and one for UserInfo (to get the info needed to decode identity data in the session data structure). Now that the introspection results include linked identity details, the UserInfo request is no longer necessary.

Version 1.0

The Globus Identity Explorer web app runs in a WSGI environment on compatible web servers including Apache. This version of Globus Identity Explorer has the following features.

• Users login and logout using Globus Auth
• "Login with XSEDE" alternate UI provided via config setting
• Shows the user's OpenID Connect 1.0 ID Token
• Shows the user's OpenID Connect 1.0 UserInfo, including linked identities
• Shows the user's OAuth 2.0 token introspection results, including linked identities and session info
• Shows the Globus Identities API results for the logged-in user
• Shows the user's Globus Auth session information
• Accurate explanations for all of the above
• Instructions for correcting identity data for all of the above
• Privacy policy page suitable for any organization