search

hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management
https://www.vaultproject.io/
Other
31.21k stars 4.22k forks source link

Support OIDC / OAuth 2.0 device authorization grant #14607

Open yee379 opened 2 years ago

yee379 commented 2 years ago

Is your feature request related to a problem? Please describe.

given vault can now support acting as a oidc idp, implementing the oidc device flow spec (RFC 8628) would be very useful! in particular for myself, being able to allow ssh logins with vault (and not using ssh keys).

austingebauer commented 2 years ago

Thanks for this feature request, @yee379!

ClientIco commented 2 years ago

When can we expect this to be part of Hashi Vault ? Please give a possible ETA!

ClientIco commented 2 years ago

What can be used in the mean time ? Is there a community plugin for Device Flow that ain't part of the binary we can use until this is added ?

ClientIco commented 2 years ago

I found this as a reference to a plugin

https://github.com/hashicorp/vault-plugin-auth-jwt/issues/103

https://github.com/hashicorp/vault-plugin-auth-jwt/pull/131

mwxp06 commented 2 years ago

It would be really nice to have possibility to use OAuth2.0, because now I can not use login via Vault (as provider) to Graphana :(