Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for Okta as auth provider #119

Merged
merged 2 commits into from
Nov 22, 2023
Merged

Add support for Okta as auth provider #119

merged 2 commits into from
Nov 22, 2023

Conversation

meatballhat
Copy link
Member

@meatballhat meatballhat commented Nov 22, 2023

Closes #103

This set of changes is a bit more damp than I'd like given the mutual exclusivity of GitHub and Okta (generic OAuth2) providers and subtle differences between them. Maybe more drying later?

plus improving relationship between session storage and secrets
@meatballhat meatballhat marked this pull request as ready for review November 22, 2023 18:17
Copy link
Contributor

@statik statik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is a lot here but reading through it makes sense! I wouldn't catch if something is missing, so I'm glad you are planning a test deploy. Nice work!

@meatballhat meatballhat merged commit 657ee84 into main Nov 22, 2023
5 checks passed
@meatballhat meatballhat deleted the okta-time branch November 22, 2023 21:45
app.register_blueprint(oauth_blueprint, url_prefix="/login")

else:
warnings.warn(f"unknown auth provider {AUTH_PROVIDER!r}")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Probably should be an error. What state will FB be in if it has an unknown provider? Will calls fail?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Or critical/fatal if that is a level.

OAUTH_MAX_AGE = parse_timedelta(
typing.cast(
str,
cfg.get("FUZZBUCKET_OAUTH_MAX_AGE", default="1 day"),
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does day need to be days?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support okta as authority integration
3 participants