OpenConext / OpenConext/OpenConext-oidcng
As a service owner, I want to be able to connect ephemeral services to OIDCng dynamically
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 4
- Forks
- 6
- Avg merge
- 5d 32m
- Merged PRs (30d)
- 3
Description
Usecase from SDP: applications are built in CI, and get assigned a synamic domain like ci-mybranch-myproject.dev.example.org. These projects are used for CI tests, but are kept online as a "preview environment". To actually use the preview, the connection to SURFconext (test) need to work and be active.
I see two ways to be able to support this:
- introduce dynamic client registration
- allow regexps/wildcards in redirect endpoints
Option 2 is easiest to implement, but we need to be careful if we want to allow this for all services (probably not). Option 1 is more work to implement, but we need this feature for OID-fed anyway, I think.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by clarifying whether the intended direction is dynamic client registration or wildcard/regular-expression redirect endpoints, including whether the latter should be limited to selected services and how OID-fed requirements affect the choice.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100