Intro

Meeting Canceled – Charles off.

Best version to do update with is important and needs to be marked clearly. Avoid test versions. Better versioning standards are needed to inform userbase on risk related to version usage?

• There is a standard, just haven't had chance to implement it yet. 

• Carry this into next Doc Endpoints meeting: https://github.com/USACE/cwms-data-api/blob/develop/docs/source/decisions/0009-code-changes-and-releases.rst 

Field Issues

Endpoint and Documentation Review

=== Previous Meeting Notes ===

Intro

Charles G will be out towards end of year. David R will be leading this meeting to cover the gap. Peter M will keep up with note taking. Nov 9th this will take place. Charles G will look into David R being able to have correct perms for Confluence and Rocket Chat.

Recaps from other meetings 

Best version to do update with is important and needs to be marked clearly. Avoid test versions. Better versioning standards are needed to inform userbase on risk related to version usage?

• There is a standard, just haven't had chance to implement it yet. 

• Carry this into next Doc Endpoints meeting: https://github.com/USACE/cwms-data-api/blob/develop/docs/source/decisions/0009-code-changes-and-releases.rst 

• Warning: Latest is used by default, which can be unwanted. Instead grab a explicit version. Revise script to examine whether latest should be default.
  • https://github.com/USACE/cwms-data-api/blob/09d7fb6570a95c4be64dfe03d685e68aea3d9c5b/.github/workflows/release.yml#L89
  • Mike N might be able to add in a gate on whether a release is latest or not. Pre-release will be used here. https://github.com/softprops/action-gh-release need to make use of make_latest/preleases settings
  • Charles G creating issue for this.
  • This has been resolved to grab the latest CDA production release.
• Question on linking to docs on Swagger? Can this be done? Can naming be used to infer linkage between Read the Doc and Swagger?
  • Charles G will open issue for this. Assigning this to Deziree S
  • Link to Read the Docs pages in the Swagger Docs UI · Issue #1897 · USACE/cwms-data-api
  • Bryson S– create Jira for the above. https://jira.hecdev.net/browse/CDA-136
• Example shown on Offices Swagger, "Feature #321", CSS blocking it being shown as link. CSS being blocked needs to be captured as an issue.
  • Groundwork could be the culprit here? This might complicate the linking of read the doc to swagger. Note added to above ticket that Charles creates.
•  

Field Issues

https://github.com/USACE/cwms-data-api/issues/1959 : CDA being updated at 10AM PDT today.

CWBI Outage AAR email from last week, also notifications are available via email list serv, ls-cwms-sysinfo2. To join lookup via sharepoint:

Issues with creating the API key are occurring. This should be covered in CDA developer meeting (Peter M).

Updates after May require new keys

Ivan MVS:

• Issue 1804: 500 error for post ratings (T7 only): This appears to be a missing library issue  on Ivan's T7 and Xalan is the fallback default lib to use when the service load does not find a JSON XML transformer. Added workaround comment.
• Question from Ivan at MVS:
  

  I wanted to clarify something that came up during a call last month. Peter mentioned that there may be some work related to the `~1Day` (irregular time series) data.

  CWBI planning to move away from using `~1Day` irregular time series, or will the existing `~1Day` time series need to be converted or modified in some way?

  MVS has a large number of `~1Day` irregular time series in our database, so I just want to understand what the plan is and prepare in advance if we will need to make changes to them.

  
  

Endpoint and Documentation Review

User Management

CDA user lists end point is present, but feature flagging is not working given DB reporting wrong version. When this is resolved, end point will be active

/user/list - gets a list of users

/version - reporting 99.99.99 erroneously.

User Roles - Use of CWMS CLI to edit user roles

Alternative Graphical web UI to perform CWMS CLI user role operations. - present on dev. Assign office action, demonstrated workflow to assign a user to a group along with permissions. This is present on cwms-data/user-roles.

Carry over to CDA dev meeting Flag head on pages with environment, DEV, TEST.

Carry over to CDA dev meeting EDIPI being returned with user name, it should only list the users name. CDA PR created, #1930.

Mitch W: when he logs in, he only sees his division in the list of offices. Is HQ required to see all division/district offices? Mitch is unable to add a new user, is this because he cannot see HQ? Mitch will look into this. At a minimum HQ should always be listed to choose from all users. Discussion on whether all users should be under HQ in the first place. Charles G will make a modification that if a user is only HQ they will show up in listing of users that can be assigned. Search box does not return unless case is matched and explicit.

Batch role added to administer batch scripts.

Ability to remove user from an office will be added in the future.

API Keys

Charles has added a web interface to manage API keys. After May 2026, keys need to be regenerated. Key operates as user creating. Do not share your keys, users should create their own keys. Help page walks through workflow.

API Keys → Create Key → give name and exp date. Expiration will be enforced when public. → generate key, save now (copy it). After this page, key is no longer shown.

Swagger page for key get being modified to no longer return key (as null). PR'ed by Charlies.

If key is leaked, removal should be done. Delete and create new key with same name. Web UI simplifies this with Rotate API key.

Help has CURL command to check if key works. This does a time series retrieval check.

Carry over to CDA dev meeting Key management notifications, key change emails, expiration notices.

Refresh button issue has PR to manage token refresh not altering UI. Groundwork water does this.

Your keys shows all keys that the user currently has. Note that your user key if 

Service user keys have been added for batch, separate key management. Discussion on whether CDA API keys will have service keys added (Carry over to CDA dev meeting).

Mitch W suggest querying the no arg offices endpoint to check if key is valid. Could add UI check to verify key working. This could also be used for the help page check.

Issues