Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create ability to request the issuer provider login URL #889

Closed
StudioSpindle opened this issue Jun 2, 2019 · 4 comments
Closed

Create ability to request the issuer provider login URL #889

StudioSpindle opened this issue Jun 2, 2019 · 4 comments
Labels
Auth Authentication and Authorization, OIDC/OAuth2, Tokens, etc

Comments

@StudioSpindle
Copy link

At the moment the token issuer provider URL is a manual setting in the playground.

A local version of keycloack would for example have the URL: http://localhost:9090/auth/realms/weaviate/.well-known/openid-configuration

However, this information is already available in Weaviate.

Would be ideal if there was an endpoint in Weaviate where you could request the token issuer URL.

@StudioSpindle StudioSpindle added the Auth Authentication and Authorization, OIDC/OAuth2, Tokens, etc label Jun 2, 2019
@StudioSpindle
Copy link
Author

Ideally a JSON file would come back with: { authorization_endpoint: string }.

@etiennedi
Copy link
Member

Do I understand you correctly that you wouldn't even need to consult the OIDC disovery page (.well-known/openid-configuration) anymore if weaviate provided you with the full authorization_endpoint? Or do you consume any other info from that page?

@StudioSpindle
Copy link
Author

StudioSpindle commented Jun 3, 2019

At the moment nothing else. Not sure what the outcome will be of the integration of Github OAuth setup.

@etiennedi
Copy link
Member

etiennedi commented Jun 5, 2019

An alternative could also be to implement
/weaviate/v1/.well-known/openid-configuration
in weaviate itself and when you access the page you simply get redirected to the configured token issuers page. Then you have all the info from the OIDC discovery page in case you need other info in the future

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Auth Authentication and Authorization, OIDC/OAuth2, Tokens, etc
Projects
None yet
Development

No branches or pull requests

2 participants