Make embedded OAuth authentication model default for both singe and multiuser che #15672
Labels
kind/task
Internal things, technical debt, and to-do tasks to be performed.
severity/P1
Has a major impact to usage or development of the system.
Milestone
Is your task related to a problem? Please describe.
At this moment there are two models of how
OAuthAPI
is made in Eclipse Che.EmbeddedOAuthAPI
- used in single-user che. In this case, we have the ability to configureGitHubOAuthAuthenticator
withclientID
andclientSecret
to be able to get github tokens from OAuthAuthenticationServiceDelegatedOAuthAPI
- use in multy-user Che. In this mode, all OAuth activities delegated to Keycloak that is configured with Che. To be able to get an OAuth token user has to provide a valid keycloak token.Now with Che-Theia we have an issue #14217 . It happens because we have no mechanism to convert machine-token to keycloak
Describe the solution you'd like
Embedded
mode by default for single and multi-user che.Delegated
mode.Embedded
is set up and github'sclientID
andclientSecret
are set for che-operator then correctly configureGitHubOAuthAuthenticator
Describe alternatives you've considered
n/a
Additional context
n/a
The text was updated successfully, but these errors were encountered: