it-at-m / it-at-m/refarch

[Feature] Ldap auth support

Open
#271 1 comment 0 reactions 0 assignees View on GitHub
blocked Component: API-Gateway Type: Feature
Dominant language
Java
Stars
7
Forks
5
Avg merge
2d 4h
Merged PRs (30d)
34

Description

### Relevant component

refarch-gateway

### Problem description (optional)

Currently only oAuth2 can be used for authentication in the gateway and JWT is used for authentication for services behind the gateway.

### Desired solution

As some of the open source RefArch applications are interesting for reusing in other municipalities/companies and not everyone of them uses a Keycloak for authentication the possibility to do the authentication and authorization via LDAP should be introduced.
For the DAVe Project this usecase was already externally requested.
Things to think about:
- Authorization: Roles/permissions via ldap-groups?
- Authentication between Gateway and Services
- Easy maintanability
- The alternatives could be more practical

Indirectly might require https://github.com/it-at-m/refarch-templates/issues/354 and https://github.com/it-at-m/refarch-templates/issues/258 as prerequisite.

### Considered alternatives (optional)

- Integrate LDAP into Keycloak: https://www.keycloak.org/docs/latest/server_admin/#adding-a-provider

### Additional context (optional)

- DAVe Issue: https://github.com/it-at-m/dave-backend/issues/80
- Internal tracking issue: https://git.muenchen.de/ccse/auftragsmanagement/einsaetze/-/issues/443

### No duplicate

- [X] I confirm that this issue is not a duplicate

### Code of Conduct

- [X] I agree to follow this project's Code of Conduct

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.