Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OAuth2 OpenId Connect Documentation #201

Merged
merged 8 commits into from
Dec 12, 2022
+318 −1
Merged

OAuth2 OpenId Connect Documentation #201

Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
7f7e0cc
wip: openid connect dox
david-blasby Jun 7, 2022
1a34522
for OPENIDCONNECT_ROLECONVERTER, changed format from ':' to '=' as se…
david-blasby Jun 8, 2022
7817096
add doc for oidc bearer tokens
david-blasby Jul 20, 2022
4d385d2
feedback from jose
david-blasby Sep 9, 2022
fd9616c
add doc for OPENIDCONNECT_LOGINTYPE
david-blasby Sep 9, 2022
8829a6e
add info about OPENIDCONNECT_SERVERMETADATA_CONFIG_URL
david-blasby Sep 20, 2022
87b1dbc
update doc for default scopes
david-blasby Sep 27, 2022
75d4314
add doc for OPENIDCONNECT_LOGSENSITIVE_INFO
david-blasby Oct 24, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
add info about OPENIDCONNECT_SERVERMETADATA_CONFIG_URL
  • Loading branch information
@david-blasby
david-blasby committed Sep 20, 2022
commit 8829a6e4e75510ed64f2cb8804b1608996114f53
6 changes: 6 additions & 0 deletions source/administrator-guide/managing-users-and-groups/authentication-mode.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -557,6 +557,12 @@ Environment Variable and Meaning

The `client secret` you configured on your OpenID server.

**OPENIDCONNECT_SERVERMETADATA_CONFIG_URL**

URL to the external OIDC server's JSON metadata document. This is typically at `/.well-known/openid-configuration` on the IDP server.

.. note:: This will download the server's configuration everytime GeoNetwork starts up, which could be a security concern. For security, use a `https` URL.

**OPENIDCONNECT_SERVERMETADATA_JSON_TEXT**

Should be the text of your OpenID server's metadata configuration (JSON).
Expand Down