Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable Fauxton to authenticate to CouchDB with a JWT access token #1458

Closed
wants to merge 12 commits into from

Conversation

Stwissel
Copy link

@Stwissel Stwissel commented Jul 31, 2024

Overview

Preliminary pull request - not ready for merge yet. To collect feedback.

  • Added a button: Login with IdP
  • Added a form to capture IdP info and store in session store
  • Added code to obtain authorization code, access token & refresh token
  • Added code to spin up CouchDB & Keycloak containers including documentation
  • Added IdP.md to document
  • modified ajax.js to add authorization header if token is still valid
  • added code to use refresh token to obtain new access token

Testing recommendations

  • Follow the steps in idp.md.
  • There's a shell script (macOS/Linux only) that configures containers to so CouchDB recognizes the Keycloak public key.

Open questions / feedback

  • How to optimize user flow? (e.g. let the IdP URL point to .well-known?)
  • What should be tested
  • should the config dialog be hidden once set?
  • should the code changes be less sprinkled over?
  • currently the IdP login is its own page, should it be merged and show/hide with login page
  • more ipressions/suggestions

GitHub issue number

Fixes #1457

Checklist

  • Code is written and works correctly;
  • Changes are covered by tests;
  • Documentation reflects the changes;
  • Update rebar.config.script with the correct tag once a new Fauxton release is made

@Stwissel
Copy link
Author

@janl Comments?

@Stwissel
Copy link
Author

Closing pending resubmission with less formatting

@Stwissel Stwissel closed this Oct 23, 2024
@Stwissel Stwissel deleted the jwt-option branch October 23, 2024 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Allow Fauxton to obtain and use an JWT access token for authentication
1 participant