Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Login with Keycloak UI #1990

Merged
merged 81 commits into from
Nov 29, 2023
Merged

Login with Keycloak UI #1990

merged 81 commits into from
Nov 29, 2023

Conversation

TheSlimvReal
Copy link
Collaborator

@TheSlimvReal TheSlimvReal commented Aug 30, 2023

closes: #1342

Open questions

  • Should the offline login support multiple users or only the last one?
  • What capabilities do we want for the demo mode? Do we need different users there or is one sufficient?
  • What are the restrictions for offline usage (e.g. only when there is no internet, or how long does it work without a remote login)? -> for now no time restrictions, but online login is required while online
  • Is it okay to completely remove CouchDB login? -> has been removed
  • What should happen if no email configured? -> Using a condition we can only ask for OTP if a email is configured

@github-actions
Copy link

Deployed to https://pr-1990.aam-digital.net/

Copy link
Member

@sleidig sleidig left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code looks good to me 💯

Functional Testing including 2FA
(on dev.aam-digital.net - some things may just be configuration issues):

  • 2FA via email code works really smoothly and the "remember device" option is super useful 😃
  • no "forgot password" option on (keycloak) login form
  • 2FA email with codes could have a slightly more elaborate email template (maybe a footer stating the system name in the body - where are these templates maintained?)
  • make keycloak login light orange background also white? (considering our recent UI background switch, and the fact that the color scheme of the app might have been customized to other colors)
  • trying login with "demo-admin" somehow puts me into a "We are sorry ... invalid username or password" screen without any chance to try with different password (console logs a 400 Bad Request)
  • on slow devices and connections the offline login section becomes available even before the "re-check" of login after an online login is complete. Maybe we need to increase the timeout a bit further?
  • offline login section should be available immediately if the device is completely offline (the "we couldn't connect to server" text is showing immediately, but the offline login option only appears with the delay). seems to have been an issue with my throttling - upon reload it works as expected
  • Also, I would maybe just disable the offline login section instead of not displaying it at all?
  • Do we have documentation about how to set this up (and possible adjust the keycloak setup)?

Copy link
Member

@sleidig sleidig left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good to merge ✔️

I'd prefer to deploy this (as a pre-release?) to selected pilot instances first, however.

# Conflicts:
#	package-lock.json
# Conflicts:
#	package-lock.json
#	src/app/core/basic-datatypes/entity/edit-single-entity/edit-single-entity.component.scss
#	src/app/core/session/login/login.component.scss
#	src/app/core/ui/navigation/navigation/navigation.component.scss
@TheSlimvReal TheSlimvReal merged commit eea30ff into master Nov 29, 2023
8 checks passed
@TheSlimvReal TheSlimvReal deleted the keycloak_login branch November 29, 2023 16:30
@aam-digital-ci
Copy link
Collaborator

🎉 This PR is included in version 3.27.0-master.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@aam-digital-ci aam-digital-ci added the released on @master managed by CI (semantic-release) label Nov 29, 2023
@aam-digital-ci
Copy link
Collaborator

🎉 This PR is included in version 3.27.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@aam-digital-ci aam-digital-ci added the released managed by CI (semantic-release) label Nov 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
released on @master managed by CI (semantic-release) released managed by CI (semantic-release)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2-Factor authentication
3 participants