Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support onboarding of Grafana in API ML SSO #2579

Closed
balhar-jakub opened this issue Sep 13, 2022 · 1 comment
Closed

Support onboarding of Grafana in API ML SSO #2579

balhar-jakub opened this issue Sep 13, 2022 · 1 comment
Assignees
@taban03
Labels
enhancement New feature or request extender this issue has been raised by an extender Priority: High

Comments

@balhar-jakub
Copy link
Member

Is your feature request related to a problem? Please describe.
We want to run Grafana dashboards behind Zowe and we want to use Zowe SSO with Grafana.
Our problem is that Zowe API ML stores JWT token in HTTP-only cookie.
And Grafana can consume JWT token only from HTTP header.

Grafana docs with auth info
https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/jwt/

We asked Grafana community about using cookies and they recommended use proxy server for auth requirements.
https://community.grafana.com/t/jwt-token-in-cookie-vs-grafana-authentication/71880

Describe the solution you'd like
Configure API ML to duplicate or move the JWT token in header?

Additional context
More about our use case - we want to show user only one login screen - Zowe one. Than use the Zowe JWT token to authenticate user in Grafana. Grafana should not show login screen at all. Grafana should be behind Gateway. All queries to Grafana should contain JWT token in HTTP header.
@balhar-jakub balhar-jakub added enhancement New feature or request new New issue that has not been worked on yet extender this issue has been raised by an extender labels Sep 13, 2022
@anton-brezina anton-brezina added 22PI3 Priority: High and removed new New issue that has not been worked on yet labels Sep 14, 2022
@taban03 taban03 self-assigned this Oct 10, 2022
@taban03 taban03 mentioned this issue Oct 12, 2022
Merged
15 tasks
@balhar-jakub
Copy link
Member Author

Demo is available here: https://ibm.box.com/s/9zm9zk32f343yqev6zt7u28oq8p9j218

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@taban03 taban03

Labels
enhancement New feature or request extender this issue has been raised by an extender Priority: High
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@balhar-jakub @taban03 @anton-brezina