Skip to content

OIDC authentication support#724

Merged
rezib merged 26 commits into
mainfrom
pr/feat-268
May 26, 2026
Merged

OIDC authentication support#724
rezib merged 26 commits into
mainfrom
pr/feat-268

Conversation

@rezib
Copy link
Copy Markdown
Contributor

@rezib rezib commented May 20, 2026

Pending tasks:

  • Release RFL v1.8.0 with OIDC authentications support
  • Bump minimal RFL authentication version to 1.8.0
  • Rework and simplify documentation changes
  • Fix configuration reference documentation changes
  • Refactor LDAP authentication routes in specific auth module
  • Move session secret key parameter at service level
  • Add command to generate session secret key on gateway
  • Document secret key setting in quickstart guide
  • Add upgrade guide to document secret key requirement
  • Fix testing in environment where oidc is not available

fix #268

@rezib rezib self-assigned this May 20, 2026
Comment thread dev/lib/devenv/keycloak.py Fixed
@rezib rezib force-pushed the pr/feat-268 branch 12 times, most recently from 71ec9b2 to eb0f1c0 Compare May 22, 2026 15:48
@rezib rezib marked this pull request as ready for review May 22, 2026 15:53
Latest version v1.8.0 is required for OIDC support.
@rezib rezib force-pushed the pr/feat-268 branch 3 times, most recently from 5dca537 to 196a226 Compare May 26, 2026 08:58
rezib added 9 commits May 26, 2026 11:02
Support OpenID Connect SSO authentication based on RFL OIDCClient.

New module conf is introduced with a function to load secret file. It
notably replaces gateway specific load_ldap_password_from_file().

Methods in SlurmwebAppGateway are refactored to setup authentication
backends in dedicated methods.

The session key file is also loaded and required at gateway startup.

The authentication method enabled in gateway is now returned in UI JSON
config file.

fix #268
Move LDAP and anonymous authentication view in dedicated submodules,
under the new view.auth package.
Return user login in successful LDAP authentication JSON response, to
make it match response for successful OIDC authentication. This
simplifies response typing in frontend.
This command can be used to generate a random secret session key with
correct permissions for Slurm-web gateway.
@rezib rezib merged commit 0c853ce into main May 26, 2026
29 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators May 26, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SSO authentication

2 participants