Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

support client credentials grant from Connection.authenticate_oidc() #419

Closed
soxofaan opened this issue Apr 24, 2023 · 4 comments
Closed

support client credentials grant from Connection.authenticate_oidc() #419

soxofaan opened this issue Apr 24, 2023 · 4 comments
Assignees
@soxofaan
Labels
auth configuration feature request

Comments

@soxofaan
Copy link
Member

Connection.authenticate_oidc() currently automatically switches between refresh token auth and device code flow auth depending on the presence of recent refresh tokens.

With growing interest in client credential auth, we should also add support for that under authenticate_oidc, that is triggered from a config setting, or the presence of certain environment variables.

That will make it possible to use a generic connection.authenticate_oidc() snippet in code samples, notebooks, ..., which will then automatically use an appropriate auth method (device code for first time user, client credentials for CI/CD test use cases, ...)
@soxofaan
Copy link
Member Author

(internal refs: CDAS-619, CDAS-622)

@soxofaan soxofaan mentioned this issue Apr 24, 2023
Open
@soxofaan soxofaan mentioned this issue May 12, 2023
Closed
soxofaan added a commit that referenced this issue May 16, 2023
@soxofaan
Issue #419 support client credentials from authenticate_oidc throug…
29b8468 
…h env vars
soxofaan added a commit that referenced this issue May 16, 2023
@soxofaan
fixup! Issue #419 support client credentials from authenticate_oidc…
7d17f74 
… through env vars
soxofaan added a commit that referenced this issue May 17, 2023
@soxofaan
Issue #419 support client credentials from authenticate_oidc throug…
2296a1b 
…h env vars
@soxofaan soxofaan mentioned this issue May 23, 2023
Merged
@soxofaan
Copy link
Member Author

worked on PR last week: #429

@soxofaan soxofaan mentioned this issue May 24, 2023
Open
soxofaan added a commit that referenced this issue May 25, 2023
@soxofaan
Issue #419 support client credentials from authenticate_oidc throug…
2ca6bdf 
…h env vars
soxofaan added a commit that referenced this issue May 25, 2023
@soxofaan
Issue #419 finetuning PR #429
7cf05a1
soxofaan added a commit that referenced this issue May 25, 2023
@soxofaan
Issue #419 finetuning PR #429
77c5348
@soxofaan
Copy link
Member Author

already merged #429 to have the basics in master

further finetuning:

  • docs explaining this feature better (e.g. document full feature set of authenticate_oidc
  • better unification of config and envvar handling

soxofaan added a commit that referenced this issue Jun 2, 2023
@soxofaan
Issue #235 #419 various OIDC related documentation updates
cf7bccd 
- deprecate `authenticate_oidc_authorization_code`
- remove authorization code grant (and password grant) from docs
- trim more fat from general OIDC docs
- document `authenticate_oidc` more in detail
- document env var handling from `authenticate_oidc` and `authenticate_oidc_client_credentials`
soxofaan added a commit that referenced this issue Jun 2, 2023
@soxofaan
Issue #419 Generalized support for fallback OIDC provider id through …
eadd5b4 
…OPENEO_AUTH_PROVIDER_ID
@soxofaan
Copy link
Member Author

soxofaan commented Jun 2, 2023

improved documentation now as well

time to close

@soxofaan soxofaan closed this as completed Jun 2, 2023
@soxofaan soxofaan mentioned this issue Jun 6, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@soxofaan soxofaan

Labels
auth configuration feature request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@soxofaan