Google as a Provider - Githubissues

jkroepke / openvpn-auth-oauth2

openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows

https://github.com/jkroepke/openvpn-auth-oauth2/wiki

MIT License

195 stars 27 forks source link

Google as a Provider #81

Closed vincib closed 11 months ago

vincib commented 11 months ago

Problem Statement

I'd like to use google workspaces as a oauth2 provider with this program

Proposed Solution

I found a way to configure it and it worked, I'll post here the configuration I used, if you want to enhance your documentation :)

Additional information

No response

Acceptance Criteria

No response

vincib commented 11 months ago

quickly :

CONFIG_OAUTH2_ISSUER=https://accounts.google.com/.well-known/openid-configuration
#CONFIG_OAUTH2_PROVIDER=google
CONFIG_OAUTH2_CLIENT_ID=1234-xxxx.apps.googleusercontent.com
CONFIG_OAUTH2_CLIENT_SECRET=GOCSPX-xxxx

I tried that with Openvpn3 for Linux and it worked like a charm :smile:

jkroepke commented 11 months ago

If you want, you can contribute docs here:

https://github.com/jkroepke/openvpn-auth-oauth2/blob/main/docs/Providers.md

What it would REALLY helpful is what is todo on Google site, e.g. setup whatever.

CONFIG_OAUTH2_PROVIDER=google

Good to see, that a dedicated provider is not needed.

vincib commented 11 months ago

to create the app in your google workspace :

from here https://console.cloud.google.com/
click on Create a new project or select an existing project
then API & Services, then Credentials
click "create credentials" of type "OAuth Client ID"
set a name for your app
in the Authorized Redirect URIs add one and set it to https://yourdomain/oauth2/callback
you'll get your client id and client secret
use those in the config as shown above

vincib commented 11 months ago

I'll do a pull request on your doc