search

protegeproject / webprotege

The webprotege code base
Other
627 stars 251 forks source link

Support for REMOTE_USER authentication #242

Open hexylena opened 9 years ago

hexylena commented 9 years ago

Enhancement: it would be great to support REMOTE_USER type authentication as an alternative to signup for those in enterprise environments.

csnyulas commented 9 years ago

Can you please elaborate on this? It is not clear (to me at least) what you mean by "REMOTE_USER type authentication"

hexylena commented 9 years ago

@csnyulas absolutely, sorry about that, was out of office for a few days.

"Remote user" authentication delegates the authentication to an upstream proxy (e.g. apache/nginx) which send an email address in an HTTP header, usually the REMOTE_USER header (though sometimes it'll be something else, e.g. HTTP_CAS_AUTH). In the webprotégé case, this would mean auto-creating/auto-logging-in a user based on the header, and trusting the upstream proxy. For those of us using institutional authentication schemes (e.g. Jasig CAS/Shibboleth/LDAP), proxies like apache have support for those methods and let administrators switch freely between them. without requiring support for each method in webprotégé.

csnyulas commented 9 years ago

Thanks for the clarifications, Eric. This would be a nice enhancement, but looking at our current list of priorities, we probably won't get to it anytime soon. If Matthew disagrees, you may be in luck, though.

Unfortunately, a quick Google search for supporting REMOTE_USER authentication within a GWT project did not turn back any useful result that we could quickly implement. :(

hexylena commented 9 years ago

No worries, definitely a wishlist/enhancement item! Thanks for the consideration.

  1. mar. 2015 18.42 skrev "csnyulas" notifications@github.com:

Thanks for the clarifications, Eric. This would be a nice enhancement, but looking at our current list of priorities, we probably won't get to it anytime soon. If Matthew disagrees, you may be in luck, though.

Unfortunately, a quick Google search for supporting REMOTE_USER authentication within a GWT project did not turn back any useful result that we could quickly implement. :(

— Reply to this email directly or view it on GitHub https://github.com/protegeproject/webprotege/issues/242#issuecomment-79534485 .

FroehlichMarcel commented 7 years ago

I am surprised to see so little discussion about LDAP etc. But maybe we have to look at it this way: As long as webprotege does not allow to delegate authentication, you exclude a large share of professional/commercial organizations from your user base. On the other hand, if you do support it, it may be the entry ticket to a very broad and professional new user base for webprotege.

hexylena commented 7 years ago

+1, we'd still love REMOTE_USER support. We have just put off of real ontology work in the hopes of finding a solid, web-based, collaborative ontology editor. We've since moved from apache-ldap/kerberos auth to apache-cas, and this would still solve our problem :)

Carl4 commented 7 years ago

I have a new project where this would be helpful too. Nobody wants to manage user accounts on several different systems.

anupam1050 commented 3 years ago

HI MAthew,

Integration with the enterprise authentication systems (AD, SSO etc.) will definitely required and hope this might have been done by now.. If not is there any plan to do the same in future for webprotege?

matthewhorridge commented 3 years ago

I'm hoping that we might get to this later this year, which will make it possible to support SSO.

anupam1050 commented 3 years ago

Hi Mathew,

Really appreciate your response and hope you must be doing great..

We are trying to integrate Webprotege with a platform with single user authentication using JWT token based approach.

Since Webprotege had its own authentication and user credentials management and doesn't support external authentication, is it possible to disable the authentication and redirect user to project/ list page?

Or is there any other way to use JWT token based authentication?

Thanks in advance

Regards Anupam

Get Outlook for Androidhttps://aka.ms/ghei36

From: Matthew Horridge notifications@github.com Sent: Monday, January 11, 2021 4:32:29 PM To: protegeproject/webprotege webprotege@noreply.github.com Cc: anupam1050 anupam.dinesh@hotmail.com; Comment comment@noreply.github.com Subject: Re: [protegeproject/webprotege] Support for REMOTE_USER authentication (#242)

I'm hoping that we might get to this later this year, which will make it possible to support SSO.

— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://github.com/protegeproject/webprotege/issues/242#issuecomment-757876936, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AC743WB4FMAHKMFEWVY3DPDSZLLELANCNFSM4A5NMQ4Q.