Open-EO / Open-EO/openeo-python-client

multi-backend support for client cred auth with `authenticate_oidc`

Open
#435 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

auth collect feedback feature request
Dominant language
Python
Stars
217
Forks
56
Avg merge
1d 22h
Merged PRs (30d)
2

Description

#419 added client cred auth support to authenticate_oidc, based on env vars like OPENEO_AUTH_METHOD, OPENEO_AUTH_CLIENT_ID, OPENEO_AUTH_PROVIDER_ID. However, these env vars are global settings, which is fine for most cases.

But how to support use cases that combine multiple back-ends with different providers (meaning different client id and client secrets)?

con1 = openeo.connect("backend1.example").authenticate_oidc()

con2 = openeo.connect("backend2.test").authenticate_oidc()

how can the be supported through env vars?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the client-credential support added in #419 and the authenticate_oidc entry point, including OPENEO_AUTH_METHOD, OPENEO_AUTH_CLIENT_ID, and OPENEO_AUTH_PROVIDER_ID. Clarify how credentials should be selected when two connections target different back-ends and providers, then define the expected behavior for the two-connection example.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.