foodcoops / foodsoft

Web-based software to manage a non-profit food coop (product catalog, ordering, accounting, job scheduling).
https://foodcoops.net/
Other
326 stars 146 forks source link

Foodsoft as an OpenID Connect provider itself? #875

Open decentral1se opened 3 years ago

decentral1se commented 3 years ago

It would be amazing if Foodsoft could support being an OpenID Connect provider for other apps (e.g. you can log into Nextcloud using your Foodsoft username/password).

It seems like an easier step than #336 which goes the other way around and seems to require a lot more work to implement? I thought the existing doorkeeper integration would already allow login integrations via OAuth2 but I haven't been able to get a Nextcloud client that supports it working.

My goal here is to reduce account management admin workload in general.

It looks like this would need the integration of doorkeeper-openid_connect. Does this sound like something that would be accepted into Foodsoft?

wvengen commented 2 years ago

Foodsoft recently got an OAuth2 provider (Admin > Configuration > Apps) for the API. I think you could technically use it to login with Foodsoft, but it's not OpenID Connect compliant, I'm afraid.

In the past I've used the userinfo plugin to use Foodsoft credentials in another app.

Ideally I'd see Foodsoft using devise or using JWT to login with other systems, but I'm not opposed to the other way around.

decentral1se commented 2 years ago

In the past I've used the userinfo plugin to use Foodsoft credentials in another app.

Aha, I'll have a look at that, thanks!

Ideally I'd see Foodsoft using devise or using JWT to login with other systems, but I'm not opposed to the other way around.

I made a start to integrate devise in https://github.com/foodcoops/foodsoft/pull/882 btw