Skip to content

Conversation

@Ithanil
Copy link
Contributor

@Ithanil Ithanil commented Oct 23, 2023

Since OIDC is currently the only implemented external authentication provider, in all the places where you would normally check for external auth usage there is instead a check for OIDC usage. This PR introduces a new env EXTERNAL_AUTH and replaces these checks with a check for EXTERNAL_AUTH. Also a few comments are left at places where additional providers would have to be "added".

This paves the way for addition of other external auth providers and, even if there are no plans to develop these from upstream side, makes it easier to develop and maintain extensions such as #5476 . Also, it will not require any additional effort to maintain the changes made in this PR and it does not change the current behavior of GL3.

If any changes have to be made to make this mergeable, I'm happy to work on them. Please let me know!

# Returns basic NON-CONFIDENTIAL information on the environment variables
def index
render_data data: {
OPENID_CONNECT: ENV['OPENID_CONNECT_ISSUER'].present?,
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can remove this now no?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Currently it would be unused, yes. Not sure if there could be a future use for this though.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would remove it then if possible please

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done.

@farhatahmad
Copy link
Collaborator

Great idea for this PR and definitely makes it easier for us to manage - thanks for your hard work

@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@farhatahmad farhatahmad merged commit a376a7f into bigbluebutton:master Oct 30, 2023
SebastianAppDev pushed a commit to SebastianAppDev/greenlight that referenced this pull request Dec 20, 2023
…ks for EXTERNAL_AUTH where applicable (bigbluebutton#5480)

* add env EXTERNAL_AUTH and replace env OPENID_CONNECT with it where applicable

* remove OPENID_CONNECT from envAPI
pachidj87 pushed a commit to ZumbTech/Auditorium that referenced this pull request Sep 15, 2025
…ks for EXTERNAL_AUTH where applicable (bigbluebutton#5480)

* add env EXTERNAL_AUTH and replace env OPENID_CONNECT with it where applicable

* remove OPENID_CONNECT from envAPI
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants