#6117 Provide OIDC secrets for testing On Demand Compose Service OIDC auth
Closed: Fixed 6 years ago Opened 6 years ago by jkaluza.

In order to implement the On Demand Compose Service auth, we need some testing client secrets on staging OIDC server.

For more information about ODCS, you can check https://fedoraproject.org/wiki/Infrastructure/Factory2/Focus/ODCS.

The auth code will work the same way as it works for MBS (Module Build Service).


This is probably something @puiterwijk could do for us ;).

I have not yet seen an RFR that is in the staging state, so as such you shouldn't be on the staging servers yet, unless I missed it.

As such, I'll create the credentials on the development IdP.
Can you tell me what the url is that your test instance runs on, taking into account it must be https:// or http://localhost ?

Yes, development IdP is what I probably want, +1.

I think for development testing, http://localhost:10747 (basically any random port I think) should sufficient.

You are setup on iddev. You can find the OpenID configuration parameters in the discovery document at https://iddev.fedorainfracloud.org/openidc/.well-known/openid-configuration.

Your client ID: odcsdev
Your client secret: 6DkANve2EqNKrRKM3Ydong2Rx8QMRX4G

Please use the normal processes (wiki doc) for requesting scopes you need to be added.

Thanks.

@cqi: You can use the client ID and secret created by Patrick above to test ODCS auth against iddev.fedorainfracloud.org.

I guess this is complete?

Please reopen if there is anything further for us to do here.

:fireworks:

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

6 years ago

Hi, the token got from https://iddev.fedorainfracloud.org/openidc/ is not active, where active is false. Could you help to fix this?

It's already fixed by @puiterwijk. Thanks!

Login to comment on this ticket.

Metadata