Skip to content

Deleting OTP user deletes Auth0 profile, even if an AdminUser or ApiUser. #134

Open
@binh-dam-ibigroup

Description

Observed behavior

Deleting an OtpUser that is also an ApiUser or AdminUser deletes the Auth0 profile, so that the remaining ApiUser and AdminUser associated with that profile can no longer log in.

Expected behavior

On deleting a user, the Auth0 profile should be deleted only if no other ApiUser/AdminUser/OtpUser is attached to it.

Steps to reproduce the problem

  1. Create an Auth0 profile.
  2. Create an AdminUser, an ApiUser, and an OtpUser with the same email.
  3. Using the admin UI, delete the OtpUser.
  4. Try login into the admin UI using the same email. Login will fail.

Any special notes on configuration used

NA

Version of otp-middleware and/or OpenTripPlanner if applicable (exact commit hash or branch name)

Latest dev branch

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions