norcams / himlar-connect Goto Github PK

Ref

• http://docs.openstack.org/developer/keystone/federation/openidc.html
• http://feideconnect.no/docs/openid/

Minimal example vhost using libapache2-mod-auth-openidc:

<VirtualHost *:8000>
...
        OIDCProviderMetadataURL https://auth.feideconnect.no/.well-known/openid-configuration
        OIDCClientID ec7eba03-f992-4fe1-ab29-9f511ea16042
        OIDCClientSecret 82c4c086-ccd5-4a0c-87f7-ea49c28dab71

        OIDCRedirectURI http://web.example.com:8000/redirect_uri
        OIDCCryptoPassphrase TopSecret
        <Location />
                   AuthType openid-connect
                   Require valid-user
        </Location>
</VirtualHost>

Fernet tokens are recommended but not the default.

http://dolphm.com/openstack-keystone-fernet-tokens/

• http://docs.openstack.org/developer/keystone/configure_federation.html

Document steps to register the dev setup as an application in Connect.

I get '{"error": {"message": "An unexpected error prevented the server from fulfilling your request: 'ascii' codec can't decode byte 0xc3 in position 5: ordinal not in range(128) (Disable debug mode to suppress these details.)", "code": 500, "title": "Internal Server Error"}}' when logging in via dataporten. My name has an 'å'. I suspect there is a connection.

Error comes from l 613 in keystone/contrib/federation/utils.py (stable/liberty branch):
new_value = v.format(*direct_maps) in _update_local_mapping