From version 1.1 >
edited by Thomas Mortagne
on 2019/01/02 17:37
To version < 2.1 >
edited by Clément Aubin
on 2019/01/28 13:15
>
Change comment: There is no comment for this version

Summary

Details

Page properties
Author
... ... @@ -1,1 +1,1 @@
1 -xwiki:XWiki.ThomasMortagne
1 +xwiki:XWiki.caubin
GoogleSummerOfCode.ProjectClass[0]
Mentor(s)
... ... @@ -1,1 +1,1 @@
1 -xwiki:XWiki.ThomasMortagne
1 +xwiki:XWiki.ThomasMortagne,xwiki:XWiki.caubin
Mentor(s)
Details

It's possible to use XWiki as OpenId Connect provider and also make XWiki authenticate on OpenId Connect provider. See OpenId Connect project page.

It work well but has various limitation that it would be nice to fix. You can find various ideas on Jira but here are the main ones:

  • both
    • setup integration tests
  • provider:
    • UI to manage authorizations
    • salt the stored token
    • allow accessing any resource using access token
    • add support for registering clients (only allow a set a clients with generated authorization key) and provide corresponding UI to manage them
    • improve the UI (very basic right now)
  • authenticator:
    • support automatically authenticating a user who is coming back
    • support client authentication (for provider who allow only registered clients)
Year

2019

Developer profile
  • Java
  • HTTP/Networking
Status

Proposed

Get Connected