Deleting OTP user deletes Auth0 profile, even if an AdminUser or ApiUser. #134
Open
Description
Observed behavior
Deleting an OtpUser
that is also an ApiUser
or AdminUser
deletes the Auth0 profile, so that the remaining ApiUser
and AdminUser
associated with that profile can no longer log in.
Expected behavior
On deleting a user, the Auth0 profile should be deleted only if no other ApiUser
/AdminUser
/OtpUser
is attached to it.
Steps to reproduce the problem
- Create an Auth0 profile.
- Create an
AdminUser
, anApiUser
, and anOtpUser
with the same email. - Using the admin UI, delete the
OtpUser
. - Try login into the admin UI using the same email. Login will fail.
Any special notes on configuration used
NA
Version of otp-middleware and/or OpenTripPlanner if applicable (exact commit hash or branch name)
Latest dev branch
Metadata
Assignees
Labels
No labels