systemseed / falcon-legacy

4 stars 1 forks source link

Build integration with Simple OAuth from D8 microservices #16

Open kalabro opened 6 years ago

kalabro commented 6 years ago

User is not authenticated, no base domain cookie

Perform request as anonymous (as it works atm)

User is not authenticated, base domain cookie set

Send request to SSO to verify the user. If user doesn't exist, create a user and authenticate him. If exists, just authenticate.

Perform request as authenticated user.

User is authenticated

Perform request as authenticated user.

Tasks

Login form should redirect to SSO login form. After login - redirect back.
Password restore form should redirect to SSO password restore form. After password restore - redirect back.
Registration should be disabled
Pull only roles which exist in the current service