Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(flex-linux-setup): adding separate token client to facilitate authentication using js library #1309

Closed
duttarnab opened this issue Sep 5, 2023 · 2 comments · Fixed by #1323 or #1324
Closed

feat(flex-linux-setup): adding separate token client to facilitate authentication using js library #1309

duttarnab opened this issue Sep 5, 2023 · 2 comments · Fixed by #1323 or #1324
Assignees
@iromli @devrimyatar
Labels
comp-flex-linux-setup Component affected by issue or PR enhancement New feature or request kind-feature Issue or PR is a new feature request

Comments

@duttarnab
Copy link
Contributor

Parent ticket# #1303

  1. Set 'jansTknEndpointAuthMethod' to none to Admin UI (auth) client (generated by setup script).
  2. Generate a new Admin UI Token Client with the following properties
  • 'jansAccessTknAsJwt'---true`
  • jansAccessTknSigAlg --- RS256
  • jansAppTyp --- web
  • jansAttrs.runIntrospectionScriptBeforeJwtCreation --- true
  • jansAttrs.introspectionScripts --- ["inum=A44E-4F3D,ou=scripts,o=jans"]
  • jansGrantTyp --- client_credentials
  • jansIdTknSignedRespAlg --- RS256
  • jansPersistClntAuthzs --- true
  • jansTknEndpointAuthMethod --- client_secret_basic
  1. Add Admin UI Token Client client_id and client_secret to admin-ui token client configuration.
tokenServerClient.clientId
tokenServerClient.clientSecret

image
@duttarnab duttarnab added enhancement New feature or request comp-flex-linux-setup Component affected by issue or PR labels Sep 5, 2023
@mo-auto mo-auto added the kind-feature Issue or PR is a new feature request label Sep 5, 2023
@devrimyatar devrimyatar mentioned this issue Sep 12, 2023
Merged
@duttarnab duttarnab reopened this Sep 13, 2023
@duttarnab
Copy link
Contributor Author

Hi @iromli

We need a separate token client as Admin UI is using a typescript lib to manage auth code flow during login. It uses PKCE and thus need jansTknEndpointAuthMethod=node (to avoid using client_secret on UI).

@iromli
Copy link
Contributor

iromli commented Sep 13, 2023

@duttarnab noted, work is in progress.

@iromli iromli mentioned this issue Sep 13, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@iromli iromli

@devrimyatar devrimyatar

Labels
comp-flex-linux-setup Component affected by issue or PR enhancement New feature or request kind-feature Issue or PR is a new feature request
Projects
None yet
Milestone
No milestone
4 participants
@iromli @devrimyatar @duttarnab @mo-auto