mod-auth-openidc

Optional or anonymous authentication with mod_auth_openidc

爱⌒轻易说出口 提交于 2020-04-11 11:58:32
问题 Is it possible in mod_auth_openidc to do the equivalent of a prompt=none attempt to access a protected website using credentials from an already logged in user but falling back to allowing unauthenticated access if not? I run a website which is accessible to the public without any authentication, but also provides additional optional features for those logged in. I'd like to use mod_auth_openidc to allow users to login, but if I protect my pages with the module, it forces login before

Apache2 Reverse Proxy with authentication over OpenID Connect and authorization over ldap

拜拜、爱过 提交于 2019-12-24 06:04:44
问题 I'm trying to setup a reverse proxy that requires authentication against an OpenID Connect Identity Provider. The User then grants the reverse proxy access to his data. Some applications behind the proxy are only accessible by the user if he is the member of specific LDAP groups. Sadly the applications are the dump and cannot authorize themselves, so the reverse proxy must handle that part. It wasn't so hard to setup the authentication part with mod_auth_openidc. What I struggle with is the

Google authentication for Gerrit and Jenkins

假装没事ソ 提交于 2019-11-30 08:39:01
Jenkins and Gerrit have both plugins for OpenID 2.0, but this API has been deprecated by Google May 19 2014 ( https://developers.google.com/accounts/docs/OpenID ) making it impossible for new installation to use and existing installations must migrate to OAuth2.0(OpendID connect). When trying to use OpenID 2.0 you will get the error message "Error 400: OpenID auth request contains an unregistered domain". The Gerrit team is aware of the problem but no solution as of yet: https://code.google.com/p/gerrit/issues/detail?id=2677 Not sure about Jenkins. revau.lt Update 2014/11/05 : For those coming

Google authentication for Gerrit and Jenkins

萝らか妹 提交于 2019-11-29 11:33:55
问题 Jenkins and Gerrit have both plugins for OpenID 2.0, but this API has been deprecated by Google May 19 2014 (https://developers.google.com/accounts/docs/OpenID) making it impossible for new installation to use and existing installations must migrate to OAuth2.0(OpendID connect). When trying to use OpenID 2.0 you will get the error message "Error 400: OpenID auth request contains an unregistered domain". The Gerrit team is aware of the problem but no solution as of yet: https://code.google.com