Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Discover Auth Parameters During Login #8

Open
tri-adam opened this issue Feb 13, 2020 · 0 comments
Open

Discover Auth Parameters During Login #8

tri-adam opened this issue Feb 13, 2020 · 0 comments

Comments

@tri-adam
Copy link
Member

Currently, there are a number of parameters that are hard-coded in loginCmd:

https://github.com/sylabs/compute-cli/blob/f7deb67f2584382b64e024d46a370284b352242e/internal/app/cli/login.go#L19-L47

What we probably want to happen is that the user/administrator can configure a single URL, and the rest of these parameters are discovered from a well-known endpoint based on that URL. The OAuth 2.0 Authorization Server Metadata spec covers some, but not all of these parameters, so won't be suitable on its own. The back end should host a discovery endpoint that will act as a source for this info.

The parameters that will need to be discovered are (at this moment):

  • OAuth ClientID
  • oauth2.Endpoint, which itself contains the AuthURL and TokenURL values. These can/should be discovered from a /.well-known/oauth-authorization-server endpoint.
  • The listenAddr and authPath in the auth package
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant