apitech
/
wekan
mirror of https://github.com/wekan/wekan
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
The Open Source kanban (built with Meteor). Keep variable/table/field names camelCase. For translations, only add Pull Request changes to wekan/i18n/en.i18n.json , other translations are done at https://transifex.com/wekan/wekan only.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
12557 Commits
2 Branches
846 Tags
87 MiB
 
 
 
 
 
 
Tag: Branch: Tree: 088bc16072
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '088bc16072'
${ noResults }
wekan/docs/Login/Oracle-OIM.md

1.5 KiB
Raw Blame History

Login with OIDC OAuth2 Oracle OIM, on premise identity manager

Added with this commit, and after added change that OAUTH2_REQUEST_PERMISSION can be set freely with environment variable for what is required.

Here is a summary of code and changes by anonymous Wekan contributors and xet7:

  • If the OAuth2 token doesn't contain the email address, Wekan raises an exception. The userinfo and servicedata were changed to avoid that.
  • In the getToken function, OIM expects a POST request that contains OAUTH2_CLIENT_ID and OAUTH2_SECRET in its header. We fixed that.
  • We also had to edit the app.js in order to put a custom "scope" value. But we think the target should be to be able to set this as an environment variable.
  • There is a problem in the code when email is null or empty. I know it might not be null but we have some situation where it is. xet7 fixed it in above commit so that if email is missing, it takes that value from username. When logging into Wekan with OIDC, both username and email should be mapped to email.
  • It was tested that with these changes, this works well.

About settings

Other OIDC settings are similar like in this wiki OAuth2, Google, Azure etc settings. Both username and email should be mapped to email.

Snap

sudo snap set wekan oracle-oim-enabled='true'

Unset Snap:

sudo snap unset wekan oracle-oim-enabled

Docker

- ORACLE_OIM_ENABLED=true