Unable to update OAuth scope for authenticated ORCIDs

[ewhanson]

Describe the issue

As background, there are two different API types for ORCID, the public and member APIs. They each make use of different OAuth scopes when authenticating users. If OJS users authenticate their ORCID via OAuth with the ORCID service, they are giving permission to a specific scope depending on which API version the journal is using. If a journal switches to use the member API in order to deposit items (submissions/reviews) with ORCID, previously authenticated ORCIDs stored in OJS will not have the correct permissions to make the deposit because they were previously authorized with a more limited scope.

Describe the solution

OJS needs to be able to handle the switchover from the public API to the member API gracefully.

The following will accomplish this:

1. When a deposit is attempted with the member API, first check if the given user/author has the correctly scoped access token.
2. If not, send a new email template to the user/author explaining the situation and prompting them to re-authenticate their ORCID in order to push the item to ORCID.
3. Add functionality to the authorization email to handle depositing a specified record as part of the process.

TODOs, PRs, Notes

PRs

• pkp-lib: pkp/pkp-lib#10819 Unable to update OAuth scope for authenticated ORCIDs #10872
• ojs: pkp/pkp-lib#10819 Unable to update OAuth scope for authenticated ORCIDs ojs#4632
• ops: pkp/pkp-lib#10819 Unable to update OAuth scope for authenticated ORCIDs ops#857
• omp: pkp/pkp-lib#10819 Unable to update OAuth scope for authenticated ORCIDs omp#1822

Notes

Important

This issue changes the default cache driver from opcache to file. If you have previously manually set the cache default to opcache, you will need to set it to file for certain features to work properly. This issue introduces the use of unique jobs, which require use of the file cache driver.

[ewhanson]

Hey @bozana, could you have a look at these PRs (noted in the issue description above)? Thanks!

[bozana]

Hi @ewhanson, I took a look and I have just a few questions for pkp-lib PR, the others are fine.

[ewhanson]

Merged! Thanks @bozana!