Delegate Token Management to Auth Backend
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 6.5k
- Forks
- 787
- PR merge metrics
- No merged PRs in 30d
Description
Currently, the st2auth module only uses the auth backend to authenticate the username/password of the user and then generates a token with a particular ttl. However, in an enterprise scenario where the auth backend is an OAuth/OIDC/SAML server, then tokens are usually generated by those servers and also managed at that layer.
Is it possible to provide an option where st2auth can delegate token management to Auth Backend that has that capability?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the st2auth module and its auth-backend integration to understand where username/password authentication ends and token generation begins. Determine the configuration and backend contract needed to delegate token creation and management to OAuth, OIDC, or SAML-capable backends. Done should be a clearly scoped, documented delegation option with defined token-lifecycle behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100