tapis-project / authenticator

BSD 3-Clause "New" or "Revised" License
1 stars 3 forks source link

Add support for Globus authentication as a custom idp configuration #21

Closed joestubbs closed 3 months ago

joestubbs commented 2 years ago

While https://github.com/tapis-project/authenticator/issues/18 adds support for various authentication methods via KeyCloak, including Globus, we have determined that adding support to utilize Globus authentication directly will confer additional benefits, including removing dependence on a separate KeyCloak instance and the ability to derive additional metadata about the authentication by making requests to additional Globus endpoints (e.g., token introspection endpoints). For more details, see https://confluence.tacc.utexas.edu/pages/viewpage.action?spaceKey=CIC&title=Federated+Identity

Thus, this issue will add a new custom_idp_configuration of type "globus" that will support walking OAuth flows directly with the Globus Auth server. Some prototype code that shows the example requests and responses is available here: https://gitlab.tacc.utexas.edu/rcardone/oauthtest