Comments (5)
So how is this supposed to work? Someone creates an account in RengKu/Renga and gets automatically registered in Keycloak but not in Gitlab?
Making a user manually in Gitlab (not via RengKu) that already exists in Keycloak does not work.
from renku-gateway.
Yes, pretty much. Creating an account in Renga is equivalent to creating an account in Keycloak. Now when someone logs into GitLab by clicking the Renga Login button and entering her Renga credentials for the first time, the user info is taken from Keycloak and a new GitLab user is created from this. We don't want the user to see the GitLab login page anymore, so we need to create the corresponding GitLab user through the API.
from renku-gateway.
Did you try this? This morning we tested this, making a user in Keycloak and then in Gitlab. This creates an error.
from renku-gateway.
I have just tried it, yes. I've registered as a new user in keycloak and then added this user as a new user to GitLab through the API. What didn't work (and I think that's what you were referring to) is using this user then to log into the GitLab page. Not sure if we care...?
from renku-gateway.
Actually, one can add the external identity provider during user creation. I've used the following post data to create the user:
{
"username": "demo",
"email": "[email protected]",
"name": "John Doe",
"extern_uid": "demo",
"provider": "oauth2_generic",
"skip_confirmation": true,
"reset_password": true
}
from renku-gateway.
Related Issues (20)
- Return meaningful errors when the user has not backend services tokens HOT 1
- feat: do not strip all cookies for core service
- Fix Redis Setinel configuration
- Gitlab oauth tokens now expire HOT 1
- Refactor using golang
- Session storage database structure HOT 3
- Finalize refactored gateway architecture
- Initial centralized authentication service (i.e. refactored gateway) implementation
- GW refactoring: OpenAPI spec for login service
- GW refactoring: Create service that refreshes tokens HOT 2
- GW refactoring: Login service HOT 2
- GW refactoring: Proxy
- Expose gitlab and gitlab registry URL in the gateway
- Add sentry to the reverse proxy
- Confirm failed write to Redis are not ignored
- Sticky sessions for ui-server
- Reverse proxy sticky sessions crashing on nil pointer dereference
- use global gitlab URL helm value in renku gateway
- [Pitch] SSH proxy with oauth2 authentication
- Expose a userInfo endpoint and map Keycloak Admin REST API
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from renku-gateway.