Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add OIDC Auth via OAuth2-proxy #14

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Add OIDC Auth via OAuth2-proxy #14

wants to merge 5 commits into from

Conversation

ivan-c
Copy link
Member

@ivan-c ivan-c commented Nov 20, 2024

  • Remove allowlist restrictions to UW IPs only
  • Reuse Leaf SAML2 configuration for OIDC
  • Use oauth2-proxy (with OIDC) to authenticate users
    • pass email via headers to Leaf API
    • pass roles as via headers as static list (leaf_users;leaf_phi;leaf_admin)

NB: Do not merge until new Leaf Keycloak realm finalized and OIDC client configured

See Projects

@ivan-c ivan-c changed the title Add OIDC Auth Add OIDC Auth via OAuth2-proxy Nov 20, 2024
@ivan-c ivan-c force-pushed the feature/auth-proxy branch from c02e5cc to f8ff8f0 Compare November 25, 2024 21:02
@ivan-c ivan-c marked this pull request as ready for review November 25, 2024 21:06
@ivan-c ivan-c requested review from rpkyle and KitRedgrave November 25, 2024 21:19
Copy link

@KitRedgrave KitRedgrave left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks alright to me :)

Copy link
Contributor

@rpkyle rpkyle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't see anything that looks out of place on my end, but I defer to @KitRedgrave here, they are much more knowledgeable this sort of thing than I am.

dev/default.env Show resolved Hide resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants