[Check-in] Add instructions for obtaining tokens using oidc-agent

[nikosev]

This PR introduces the following changes:

• Update decommission deadline of the Production instance of Check-in
• Add instructions for oidc-agent

[sebastian-luna-valero]

Hi,

I am using oidc-agent 4.2.6-1 and I get

$ oidc-gen --pub --issuer https://aai.egi.eu/auth/realms/egi --scope eduperson_entitlement --scope offline_access myaccount
Could not find a public client for this issuer.

Should I wait for an updated version of oidc-agent?

Many thanks, Sebastian

[nikosev]

Hello @sebastian-luna-valero

The public client for the Keycloak based Check-in has been added in the oidc-agent v4.3.1. If you are using a macOS system, there is a bug in oidc-agent v4.3.1, in which the file that contains the public clients is not updated properly. Tomorrow (22/7), KIT will release the patch version 4.3.2 which resolves this issue. The work around is to manually move the pubclients.config to your user configuration directory, using the command:

$ cp -p /usr/local/Cellar/oidc-agent/4.3.1/etc/oidc-agent/pubclients.config ~/.config/oidc-agent/

[sebastian-luna-valero]

Thanks @nikosev

I am using Ubuntu 20.04 and I see that version 4.3.1 has not been uploaded yet to the repo: https://repo.data.kit.edu/ubuntu/20.04/

Will report back once it's upgraded on my end.

[sebastian-luna-valero]

Following up on https://github.com/indigo-dc/oidc-agent/releases/tag/v4.3.2

I now get:

$ oidc-gen --pub --issuer https://aai.egi.eu/auth/realms/egi --scope eduperson_entitlement --scope offline_access myaccount
Generating account configuration ...
Error: Could not get token endpoint from the configuration endpoint. This could be because of a network issue. But it's more likely that your issuer is not correct.

Please let me know if I should follow this up on https://github.com/indigo-dc/oidc-agent/issues instead.

Thanks, Sebastian

[nikosev]

@sebastian-luna-valero I updated oidc-agent to v4.3.2 and I run the command you provided on my mac, and I managed to get an Access Token successfully. I would suggest to open an issue describing this issue in the GitHub repo of oidc-agent.