Skip to content

Support keycloak token authentication#187

Merged
tpoliaw merged 1 commit intoDiamondLightSource:mainfrom
tpoliaw:tokens
Oct 31, 2024
Merged

Support keycloak token authentication#187
tpoliaw merged 1 commit intoDiamondLightSource:mainfrom
tpoliaw:tokens

Conversation

@tpoliaw
Copy link
Collaborator

@tpoliaw tpoliaw commented Oct 10, 2024

No description provided.

Copy link
Contributor

@garryod garryod left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think I would prefer if we were to have a deployment level switch (e.g. env var) which selected between KeyCloak and CAS, since they both need their respective env vars anyway (USERINFO_ENDPOINT or JWKS_ENDPOINT)

Edit: Haven given it further consideration I think we want an env var which can be overridden by an input, such that the central deployments behaviour can be configured by it's caller

@garryod
Copy link
Contributor

garryod commented Oct 31, 2024

Discussed in person, decided we should only support KeyCloak JWTs as CAS isn't being used by anyone and is due for deprecation

@tpoliaw tpoliaw marked this pull request as ready for review October 31, 2024 14:51
@tpoliaw tpoliaw changed the title Very rough draft for supporting both keycloak and cas Support keycloak token authentication Oct 31, 2024
Copy link
Contributor

@garryod garryod left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tpoliaw tpoliaw merged commit f5bd52a into DiamondLightSource:main Oct 31, 2024
@tpoliaw tpoliaw deleted the tokens branch October 31, 2024 15:36
@MattPrit MattPrit mentioned this pull request Nov 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants