search

SAP / project-portal-for-innersource

Lists all InnerSource projects of a company in an interactive and easy to use way. Can be used as a template for implementing the "InnerSource portal" pattern by the InnerSource Commons community.
https://sap.github.io/project-portal-for-innersource/
Apache License 2.0
143 stars 71 forks source link

Adding Authentication to the Portal #44

Closed Wayne-Ennis closed 7 months ago

Wayne-Ennis commented 1 year ago

Hey i have the need to have our portal Secured behind an OAUTH2 IDP. Has anyone explored options for this? is it possible for me to just install my library, then add the methods? What are your recommendations? Thanks

dellagustin-sap commented 9 months ago

Hello @Wayne-Ennis , sorry for the late response, I need to review my notification settings. At SAP we are hosting the portal with GitHub Pages in a GitHub Enterprise instance. The GitHub Pages cannot be accessed anonymously, the same authentication flow that is used for GitHub (e.g accessing repositories) is enforced here, so we have not implemented our own authentication mechanism.

Have you been able to use our portal at the end?

Wayne-Ennis commented 7 months ago

So we have it deployed to AWS with a Serverless Architecture (s3, Cloudfront). We've been able to use Lambda@Edge to Handle Auth with our Identity Provider.

Wayne-Ennis commented 7 months ago

Closing this Issue, as We've found a pattern that would work

spier commented 7 months ago

hey @Wayne-Ennis , on a tangent, if you like you can get your org added to the ADOPTERS page.

Always great to learn about other orgs using this project in the wild. And if you want to add a short description of your auth approach, wouldn't hurt either.

Cheers :)

dellagustin-sap commented 7 months ago

hey @Wayne-Ennis , on a tangent, if you like you can get your org added to the ADOPTERS page.

Always great to learn about other orgs using this project in the wild. And if you want to add a short description of your auth approach, wouldn't hurt either.

Cheers :)

Thank you @spier , that's exactly what I was going to suggest.