SSO - Digital Credential Demo #1311
Draft
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Jason Sherman <[email protected]>
fixes made to files where bugs found. changed a param substitution name in resource files. Signed-off-by: Jason Sherman <[email protected]>
remove keycloak from API, replace with jwt verification only. token to user mapping now in configuration not in keycloak. frontend keycloak configuration changes slightly (no resource_access). no user role. Signed-off-by: Jason Sherman <[email protected]>
allow null logoutUrl. add parameters to logoutUrl at runtime Signed-off-by: Jason Sherman <[email protected]>
Signed-off-by: Jason Sherman <[email protected]>
Signed-off-by: Jason Sherman <[email protected]>
Signed-off-by: Jason Sherman <[email protected]>
Signed-off-by: Jason Sherman <[email protected]>
Signed-off-by: Jason Sherman <[email protected]>
fix middleware calls. fix issues raised in PR. Signed-off-by: Jason Sherman <[email protected]>
…thorized Signed-off-by: Jason Sherman <[email protected]>
…ase. remove index on keycloakId, remove restriction that is is a GUID change token map value parsing spec, allow json and stringToGUID. add/enhance tests around token parsing Signed-off-by: Jason Sherman <[email protected]>
Signed-off-by: Jason Sherman <[email protected]>
Need supplementary login parameters to OIDC. Signed-off-by: Jason Sherman <[email protected]>
add default CHEFs permission for digital cred IDP Signed-off-by: Jason Sherman <[email protected]>
new config map and env vars for demo against sandbox sso Signed-off-by: Jason Sherman <[email protected]>
usingtechnology
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This is a demo-only PR. This builds on the SSO/IDP changes in #1258 and adds a new IDP - Verified Email.
The SSO Standard realm supports the Verified Email credential in their sandbox environment, so this PR/deployment will make use of a temporary config map (chefs-sandbox-oidc-config) and use
SANDBOX_OIDC_*environment variables to set up Keycloak/OIDC.Management of the OIDC client is here: https://bcgov.github.io/sso-requests-sandbox
To test this out, you will need:
The Verified Email credential/login will act like
BCeID Basic- extremely limited permissions in the app.Here is a link to a form that requires Verified Email login: https://chefs-dev.apps.silver.devops.gov.bc.ca/pr-1311/form/submit?f=e5318071-b2d0-470e-b1df-d0a8c52da208
Types of changes
Checklist
Further comments