search

amperity / vault-clj

Clojure client for Hashicorp's Vault secret management system.
Other
70 stars 17 forks source link

Support OIDC authentication #67

Closed ieugen closed 1 year ago

ieugen commented 2 years ago

We switched from using github auth to using OIDC auth via Azure AD + groups. Company is using Office 365 and we can leverage MS Auth and Security groups for Vault access.

Interested in supporting this functionality.

greglook commented 2 years ago

Sure, happy to add that to the base library as long as it doesn't require pulling in any Azure-specific dependencies. If it does, then this can be provided in a separate library like amperity/vault-clj-aws

ieugen commented 2 years ago

IMO it should not require any AWS specific parts. When the vault client does oidc auth it opens a browser to authenticate to Azure AD. Not sure how this will be handled. I hope to get a chance to look at this in the upcoming weeks.

ieugen commented 2 years ago

Not sure if this will be feasible outside of a gui environment since oidc relies on the user authenticating over a browser.