search

conwetlab / ckanext-oauth2

OAuth2 support for CKAN
GNU Affero General Public License v3.0
25 stars 56 forks source link

Does ckanext-oauth2 supports multiple applications for authentication? #57

Open ArqamFarooqui110719 opened 2 years ago

ArqamFarooqui110719 commented 2 years ago

I'm using dockerized CKAN (2.7.2) + ckanext-oauth2 (0.3.8) + WSO2 ( WSO2 API Manager & WSO2 Identity Server )

I've created a user test1 as a primary tenant user and test2 as a secondary tenant user in wso2. And I've used the ckan.oauth2.client_id and ckan.oauth2.client_secret of primary tenant user (i.e. test1) in ckan.ini file (screenshot is attached below).

ckan-oauth-configuration

In the above case when we are login the CKAN with test1 (primary user), then we are successfully able to login but when we are login the CKAN with test2 (secondary user). then we are getting error i.e. Application you are trying to access does not allow users from your organization.

Does ckanext-oauth2 supports multiple applications (for e.g. application of primary tenant and application from secondary tenant at a time) for authentication? or How can we login from both users i.e. created on different wso2 tenants?

frafra commented 2 years ago

It does not. I suggest using a proxy.

ArqamFarooqui110719 commented 2 years ago

Issue was with wso2, resolved now:) We can login from both primary and secondary users created on WSO2. I was facing issue bcoz users were not in sync.