api/src/main/java/org/apache/custos/api/identity/IdentityManagementController.java (2 lines): - line 452: // TODO : Validate key availability in params redirect_uri, code, grant_type - line 459: .setTenantId(Long.parseLong(credential.getId().split("-")[2])) // TODO This is very risky. Find a different way to figure out tenant id services/src/main/java/org/apache/custos/service/management/IdentityManagementService.java (1 line): - line 286: // TODO send an email to the tenant services/src/main/java/org/apache/custos/service/management/GroupManagementService.java (1 line): - line 126: String REMOVE_ALL_TAG = "custos-remove-all"; // TODO: update ProtobufPropertiesModule.java for a cleaner solution api/src/main/java/org/apache/custos/api/tenant/TenantManagementController.java (1 line): - line 399: // TODO - add validation for exactly one execution for (to deprecate)