Enhancing ORCID API Security & Performance

[pierre...@bibl.ulaval.ca]

Hi everyone, 

ORCID has just announced security improvment for their API  (https://groups.google.com/g/orcid-api-users/c/kBq1HPM9uXY/m/V8DXY2g8AAAJ)

 and recommends testing when using the sandbox API: 

"Checklist for Testers:

We are aware that some of you are actively developing against our Sandbox environment. While we expect this rollout to be seamless, we recommend your team performs a quick health check on the following in the sandbox environment before 24 March: 

1. User Login Flow: Ensure the "Sign-in with ORCID" flow remains uninterrupted.

2. API Requests: Verify that your system is successfully exchanging tokens and fetching data.

3. Error Logging: Alert us if you see a spike in authentication-related error codes."

As DSpace Demo site (https://demo.dspace.org/home) and Sandbox Site are using the ORCID sandbox API (https://sandbox.dspace.org/home), i am wondering is this ORCID security enhancement may have impact?

Thanks!

Pierre