Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a testing IDP for OIDC authentication #2714

Open
enrichman opened this issue Nov 22, 2023 · 2 comments
Open

Add a testing IDP for OIDC authentication #2714

enrichman opened this issue Nov 22, 2023 · 2 comments
Labels
area/QA Excluded from release notes. Quality assurance / Regression testing area/testing PR used for some kind of debugging. Not intended to be merged. kind/quality Tech Debt / Cleanup

Comments

@enrichman
Copy link
Member

enrichman commented Nov 22, 2023

The OIDC authentication is missing tests related to groups. The staticPasswords field in the dex config doesn't support groups, and it has only "fixed" users.

Setting up an external IDP (LDAP?) will allow us to create/update users, and make some checks related to their groups and permissions. We would need to update the dex configuration, and restart Dex though.

Needs investigation.

@enrichman enrichman added kind/quality Tech Debt / Cleanup area/testing PR used for some kind of debugging. Not intended to be merged. area/QA Excluded from release notes. Quality assurance / Regression testing labels Nov 22, 2023
@enrichman enrichman added this to the Outside release-cycle milestone Nov 22, 2023
@enrichman
Copy link
Member Author

Pairing with @mmartin24 maybe we don't need a full blown IDP to test some of the OIDC features, such as groups. We can create a valid JWT token with the needed claims to test the groups association.

@mmartin24
Copy link
Contributor

@enrichman, I made this Confluence page with a summary of the steps done with this: https://confluence.suse.com/display/Epinio/How+to+check+update+of+user+roles+on+each+new+login+session

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/QA Excluded from release notes. Quality assurance / Regression testing area/testing PR used for some kind of debugging. Not intended to be merged. kind/quality Tech Debt / Cleanup
Projects
Status: Scheduled
Development

No branches or pull requests

2 participants