META-pipe Authorization service.

Inge Alexander Raknes,Lars Ailo Bongo

doi:10.12688/f1000research.13256.2

Inge Alexander Raknes, Lars Ailo Bongo

Open Access

https://doi.org/10.12688/f1000research.13256.2

Copy DOI

Journal: F1000Research	Publication Date: Jun 1, 2018
Citations: 2	License type: CC BY 4.0

Affiliation: UiT The Arctic University of Norway

Abstract

We describe the design, implementation, and use of the META-pipe Authorization service. META-pipe is a complete workflow for the analysis of marine metagenomics data. We will provide META-pipe as a web based data analysis service for ELIXIR users. We have integrated our Authorization service with the ELIXIR Authorization and Authentication Infrastructure (AAI) that allows single sign-on to services across the ELIXIR infrastructure. We use the Authorization service to authorize access to data on the META-pipe storage system and jobs in the META-pipe job queue. Our Authorization server was among the first SAML2 service providers that integrated with ELIXIR AAI. The code is open source at: https://gitlab.com/uit-sfb/AuthService2.

Highlights

ELIXIR brings together and coordinates European life science resources, including databases, software tools, training materials, cloud storage, and supercomputers
In future work we describe how the URI is built after the client obtains an access token from the Authorization service
One of the resources developed in the ELIXIR-EXCELERATE project is META-pipe1, an automated pipeline for annotation and analysis of metagenomic and genomic sequence data that is targeted for marine metagenomics

Summary

Introduction

ELIXIR brings together and coordinates European life science resources, including databases, software tools, training materials, cloud storage, and supercomputers. We describe the design, implementation, and use of the META-pipe Authorization service. It authenticates users using ELIXIR AAI, and it authorizes access to data on the META-pipe storage system and jobs in the META-pipe job queue We use it as ad-hoc authentication for our own services. It is a simple out-of-box-solution that we believe is a good introduction to OAuth and ELIXIR AAI. The rest of this paper describes the design and implementation of the server, how it is used by end-users and our backend services, and it gives an overview of the standards and libraries we have used.

Methods

From scratch implementation