Marcus Christie created AIRAVATA-2922:
-----------------------------------------

             Summary: Investigate: How to generate API keys for developers
                 Key: AIRAVATA-2922
                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2922
             Project: Airavata
          Issue Type: Task
            Reporter: Marcus Christie


The goal is to figure out how to leverage Keycloak so that API developers can 
get an API key to use authenticate with the Airavata API. Some thoughts:
* Keycloak has dynamic client registration: 
https://www.keycloak.org/docs/latest/securing_apps/index.html#openid-connect-dynamic-client-registration
 Maybe this could be used to allow developers to self-service get a client id 
and secret
* Can we create a client_id/client_secret service account that authenticates to 
the user's account?



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to