SAP / openui5

OpenUI5 lets you build enterprise-ready web applications, responsive to all devices, running on almost any browser of your choice.
http://openui5.org
Apache License 2.0
2.95k stars 1.24k forks source link

Integrate OpenID Connect as identity provider #4122

Closed rlfnb closed 1 week ago

rlfnb commented 3 weeks ago

OpenUI5 version:

I would like to understand this ticket as a kind of feature request. Nowadays, OpenID Connect (OIDC) is very common and widely used. So, OIDC should be a first class citizen of openui5.

What is the expected result?

Two possible approaches in my opinion (not limited to two, but my imagination is sometimes a bit weak ;) ):

  1. Adding a chapter to the openui5 documentation (maybe as a tutorial=) how to use/integrate OIDC in an architecture compliant way
  2. Integrate the OIDC flow into the core (maybe into the router?), so you simply have to provide your well-known url, client-id and you can get the user profile from there, if available.

What happens instead?

Many developers will try more or less sophisticated ways to make it work and simply deliver non-optimal user experiences. So, I guess its not the intention of SAP.

DonkeyCo commented 3 weeks ago

Hi @rlfnb,

I've created an internal incident DINC0263658 for your request. The status of the issue will be updated here in GitHub.

boghyon commented 1 week ago

@rlfnb OpenUI5 focuses primarily on building client-side enterprise webapps. Identity layer is a different topic that, unfortunately, falls outside the scope of a UI framework. Please refer to the documentation of the platform that can incorporate an identity service for hosting apps.

rlfnb commented 1 week ago

enterprise web apps without identity makes no sense without identity, but the decision is taken. Thank you for looking into it.