Skip to content

Commit

Permalink
Additional fix
Browse files Browse the repository at this point in the history
Signed-off-by: Michal Maléř <mmaler@redhat.com>
  • Loading branch information
MichalMaler committed Jul 25, 2019
1 parent e87557e commit 4f6c2f0
Showing 1 changed file with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ OpenId authentication on the Che server implies the presence of an external Open

* The Composition of an internal `subject` object that represents the current user inside the Che server code.

*Note*: Currently, the only supported and tested OpenID provider is Keycloak.
*Note*: Currently, the only supported and tested OpenID provider is Keycloak.

[id='procedure-{context}']
== Procedure
Expand All @@ -67,7 +67,7 @@ Example output:
}
```
+
Also, this service allows downloading the JS client library to interact with the provider using the `<che.host>:<che.port>/api/keycloak/OIDCKeycloak.js` URL.
Also, this service allows downloading the JS client library to interact with the provider using the `<che.host>:<che.port>/api/keycloak/OIDCKeycloak.js` URL.


. Redirect the user to the appropriate provider’s login page with all the necessary parameters like client_id, return redirection path. This can be done with any client library (JS or Java).
Expand All @@ -82,7 +82,7 @@ If the validation is successful, the parsed form of the token is passed to the e

* Environment initialization. The filter extracts data from the JWT token claims, creates the user in the local database if it is not yet present, and constructs the `subject` object and sets it into the per-request *EnvironmentContext* object, which is statically accessible everywhere.

If the request was made using only a machine token, the following single authentication filter is used:
If the request was made using only a machine token, the following single authentication filter is used:

* *org.eclipse.che.multiuser.machine.authentication.server.MachineLoginFilter*: Finds the user that the userId token belongs to, retrieves the user instance, and sets the principal to the session.
The Che server-to-server requests are performed using dedicated request factory that signs every request with the current subject token obtained from the EnvironmentContext object.
Expand Down

0 comments on commit 4f6c2f0

Please sign in to comment.