-
Notifications
You must be signed in to change notification settings - Fork 408
Implementation of Oauth of Github, Google and Microsoft #4298
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
5ce7f18
to
68eaf7b
Compare
de2e213
to
d3f6b29
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please see my remarks.
I have some additional comments apart from the direct in code messages:
- My major concern with the implementation is that the oauth related API and its implementation is not generalized enough. The configuration is good enough for the time being.
- I am not sure if we are allowed to use the Git Hub logo in our repo.
- Please invite @cservakt to review the JS and VueJS parts.
I did not do a thorough review of the oauth flow in authentication.py
after you addressed the above issues I will do another round concentrating on that.
Thanks for the hard work!
12c68e7
to
f064c2b
Compare
b4d5a0a
to
d3847d6
Compare
…s, commented lines
1f09f7c
to
9d7d0c7
Compare
9d7d0c7
to
b15f48a
Compare
a990318
to
d98ca60
Compare
d98ca60
to
4b2f8ff
Compare
match = pattern.match(callback_url) | ||
if match is None: | ||
LOG.warning("Configuration format of callback_url is " | ||
f"invalid for provider {provider_name}." |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Add an extra space to the end so the next sentence is separate.
Also, this message should be printed only if the given provider is enabled.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
web/server/config/server_config.json
Outdated
"client_id" : "ExampleClientID", | ||
"client_secret": "ExampleClientSecret", | ||
"authorization_url": "https://github.com/login/oauth/authorize", | ||
"callback_url": "http://server_host/login/OAuthLogin/provider", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Suggest https. A the other providers, too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
8b078c0
to
7f39ebe
Compare
…ck_url, removed unnecessary code from fetching token
7f39ebe
to
b9f7f40
Compare
bcd1da8
to
3cc379b
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good enough to merge for now - there are still some open questions around CLI usage and about what identifier to use to uniquely identify a user across all login methods, but those can be added on separately.
Based on personal agreement the PR can be merged for now.
fixes #4160
The right way it should look after logging in

new added button to log in with github

Changes: