eclipsesource / theia-cloud-helm

Eclipse Public License 2.0
3 stars 6 forks source link

Facilitate logout via OAuth proxy and fix line endings #61

Open lucas-koehler opened 1 week ago

lucas-koehler commented 1 week ago

Facilitate logout via OAuth proxy by adding the keycloak host to the OAuth proxy's domain allowlist. This allows redirecting to the Keycloak logout page after logging out from the OAuth proxy.

Also unifies line endings to LF in the theia-cloud Helm chart. For some reason, some files used CRLF.

This does not include the actual documentation on how to logout but I tried it in a hacky way with a local sub-domain based setup and it worked.

Part of eclipsesource/theia-cloud#264


A logout URL could look like this (replace the IP with your minikube IP):

Logout URL with redirect to keycloak logout that then redirects to the landing page. The URI for the landing page is double encoded because its a query parameter of the keycloak logout uri which itself is a query parameter of the ./oauth2/sign_out url.

./oauth2/sign_out?rd=https%3A%2F%2F192.168.59.107.nip.io%2Fkeycloak%2Frealms%2FTheiaCloud%2Fprotocol%2Fopenid-connect%2Flogout%3Fclient_id%3Dtheia-cloud%26post_logout_redirect_uri%3Dhttps%253A%252F%252Ftry.192.168.59.107.nip.io