envoyproxy / envoy

Cloud-native high-performance edge/middle/service proxy
https://www.envoyproxy.io
Apache License 2.0
24.71k stars 4.75k forks source link

Do we have any plans to support OIDC? #21982

Open saltbo opened 2 years ago

saltbo commented 2 years ago

Title: Do we have any plans to support OIDC?

Description:

OAuth2 config is tedious, if support oidc, we only need config the discover api to implement the all oauth2 feature

[optional Relevant Links:]

wbpcode commented 2 years ago

cc @snowp

snowp commented 2 years ago

I'm not aware of any plans, so it will likely require someone to do the work. PRs welcome!

cc @rgs1

saltbo commented 2 years ago

I found a plugin https://github.com/dgn/oidc-filter

NabeelShahid7 commented 2 years ago

I would like to work on this enhancement.. Can I please get some kind of an approval from any contributor of this repository? About Me: I am a student currently pursuing his Post Graduate in Computer Science. I have been assigned a course component which involves contributing to any open source project. I am liking this repository and would like to start from scratch to try getting this issue fixed. @snowp

loewenstein commented 7 months ago

Looking at https://github.com/envoyproxy/gateway/issues/881, Envoy Gateway seems to consider this topic "done".

On the other hand side, given the title of this issue is very broad I'd be interested if there are any ideas, plans or even just appetite for looking into additional specs like OIDC Session Management, OIDC Front-Channel Logout and OIDC Back-Channel Logout?

ngorantla-equinix commented 7 months ago

anyone working on this implementation?

loewenstein commented 7 months ago

@ngorantla-equinix I don't think so. I would first of all be interested to hear if there is appetite for "more of OIDC"?