Comments (10)
I would like to connect Dependency-Track with GitLab as OAuth2 authentication provider and will investigate on this.
Further information: https://oauth.net/2/
from alpine.
I started to work on an OpenID Connect implementation a few days ago (https://github.com/nscuro/Alpine/tree/10-openidconnect-support). I did check out pac4j and google-oauth-java-client and found pac4j to be too invasive. For a clean pac4j implementation, I feel Alpine would need to migrate completely to pac4j, including its "standard" and LDAP authentication. I went the DIY route as it appears to align with Alpine's principles quite well (minimal dependencies, no BS).
I don't have all too much time to work on it and I cannot promise that it'll be "production ready" in a timely manner. This is just a heads up that someone is indeed somewhat actively working on this topic. But as I said, please don't expect anything until I submit a PR.
from alpine.
OIDC is supported. Changing title to SAML
from alpine.
Investigate:
from alpine.
+1 for SAML or OpenID support. What are next steps? Did you ever get around to investigating either of those auth plugins @stevespringett? How did they look?
from alpine.
I have not had a chance to investigate, but I think this should be a capability of the next major release.
from alpine.
I would love to get support for OIDC. Is this still on the roadmap? And can you estimate when the next major release will be?
from alpine.
Yes, still on roadmap. Lots of folks want it. Ticket is labeled 'help wanted', so if someone submits a quality PR with test cases, it will make it into a release sooner than relying on myself to do it.
from alpine.
is this feature planned to be in the 1.8.0?
Since there is already a snapshot for 1.8.0, is there any ETA for oauth2?
Thank you :)
from alpine.
@BenjenJones this ticket states 'help wanted'. If there are contributions from the community to add the feature, then yes, it will be included in 1.8.0
from alpine.
Related Issues (20)
- Update to Java 17 HOT 4
- Migrate to Jakarta EE namespace HOT 3
- Add an OIDC default group HOT 1
- Add description field to ApiKey
- Save and load `SecretKey` using encoded byte array instead of Java Object Serialization
- Add getTeams() to Principal contract
- Add support for multiple OIDC providers
- Use new class ProxyConfig for proxy selection in OIDC configuration
- Update JUnit 4 to 5 using OpenRewrite
- Log IP / User Agent for invalid ApiKeys and JWTs
- Provide a means to disable or otherwise configure the DataNucleus L2 cache
- Use USERS_SEARCH_FILTER to search for LDAP User
- Add ability to customize the Micrometer `MeterRegistry`
- Add support for logging in JSON format
- Treat API key as secret and store them securely HOT 7
- Add dynamic JWT Token expiry time
- Add 'comment' field for API keys HOT 2
- Upgrade Surefire Plugin from 2.22.2 to Latest 3.x HOT 1
- Please publish alpine-parent before dependency-track HOT 1
- Investigate datanucleus issue where storeMgr is null HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from alpine.