search

irods-contrib / irods_auth_plugin_openid

Other
2 stars 2 forks source link

Enable use of externally generated access tokens for automated login flows #10

Closed theferrit32 closed 6 years ago

theferrit32 commented 6 years ago

Useful for clients who wish to login with an existing access token from an identity provider identity already linked to iRODS account but which was not authenticated via the auth_microservice deployed alongside the iRODS server instance.

Still default to initiating a clean login, but if an access token is provided, switch over to this new flow.

Use verification endpoint which will be implemented in the auth_microservice. https://github.com/heliumdatacommons/auth_microservice/issues/9

Provide some mechanism through which the access token can be provided to the client library in cleartext. Possibly in place of the iinit password.

theferrit32 commented 6 years ago

Completed. Can provide either in the .irodsA file or as the argument to iinit