Skip to content

Conversation

@boehlke
Copy link

@boehlke boehlke commented Sep 27, 2024

This PR contains a POC for a OIDC/oauth2 integration into OpenSlides. The dev setup is based on keycloak.

@boehlke boehlke added feature keycloak-oidc OIDC support for OpenSlides with Keycloak as default IdP labels Sep 27, 2024
Copy link
Member

@luisa-beerboom luisa-beerboom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Amend the tests for actions that were updated, delete the tests for actions that were deleted.

Comment on lines 55 to 56
additional_optional_fields={
"saml_attr_mapping": {
"type": ["object", "null"],
"properties": saml_props,
"required": ["saml_id"],
"additionalProperties": False,
},
},
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If it is going to be empty, you can delete the additional_optional_fields attribute.

Comment on lines -53 to -59
def create_authorization_token(self, user_id: int, email: str) -> str:
try:
response = self.auth_handler.create_authorization_token(user_id, email)
except AuthenticateException as e:
raise AuthenticationException(e.message)
return response.headers.get(AUTHORIZATION_HEADER, "")

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

openslides_backend/services/auth/interface.py defines the interface for this class, including this method. You should remove the method from that place as well

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feature keycloak-oidc OIDC support for OpenSlides with Keycloak as default IdP

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants