[FINERACT-1261] support for external Oauth provider

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.6.0
• Component/s: Security
• Assignee: Petri Tuomola
• Reporter: Vincent FUCHS
• Created: 18/Nov/20 11:08
• Updated: 28/Dec/21 03:00
• Resolved: 28/Dec/21 03:00

Description

Hi,

 

I was looking at the couple of tickets open around OAuth2 support, mostly https://issues.apache.org/jira/browse/FINERACT-1142 (and its related issues) and https://issues.apache.org/jira/browse/FINERACT-1012 , and from what I understand, we currently have no way to configure an external OAuth provider. Is that correct ? 

 

A typical Oauth flow is to authenticate against a standard provider, using the provider login page and get an OAuth token and be redirected, then use that token in all the requests. The security layer then checks the token validity for all incoming requests.

 

Spring has fairly standard support for this : https://spring.io/guides/tutorials/spring-boot-oauth2/

 

Is it something that works but is not documented ? or is it sure that it doesn't currently work ?

(I would assume that once https://issues.apache.org/jira/browse/FINERACT-1012 is completed, it will just be a matter of providing the right Spring properties values)

 

Thanks

 

–

Vincent

 

 

Issue Links

• is fixed by: FINERACT-1012 Spring Security OAuth 2.x to Spring Security 5.2.x
• is related to: FINERACT-1012 Spring Security OAuth 2.x to Spring Security 5.2.x