Re: Login changes & OAuth support

2019-01-29 Thread Geoff Macartney
Thanks very much for that explanation Juan. Do I understand it right that there will be one authenticator in the security provider? Or will there be the opportunity to "Log in with Google", "Log in with Facebook", "Log in with Github" etc? I was wondering about the possibility of plugging in aut

Re: Login changes & OAuth support

2019-01-29 Thread Juan Cabrerizo
Hello Geoff -and all Brooklyners- I'm working on a Google based implementation of our Security Provider interface that allow is to use Google's Identity Platform as authentication server. Of course I'm writing some documentation (most of it on comments and inside the configuration files). The basic

Re: Login changes & OAuth support

2019-01-28 Thread Geoff Macartney
Hi all, I missed this email when it came out, but I'm excited to hear about OAuth support in Brooklyn. You've all clearly put a tremendous amount of work into it. Are there any docs anywhere about how this works? e.g. maybe more email threads I missed? :-) I don't suppose any of you folks who w

Re: Login changes & OAuth support

2019-01-22 Thread Alex Heneveld
Thanks Duncan. The PR [1] is on this email now (sorry!). The brooklyn.cfg that ships with karaf sets up AnyoneSecurityProvider I believe, not requiring login, rather than basic (this PR hasn't changed that). The docs to configure basic are at [2], but they need a minor update to reflect th

Re: Login changes & OAuth support

2019-01-22 Thread Duncan Grant
Alex, Nice work - this seems to be a regular feature request, I have a couple of questions. I think you're missing a link to the PR (ref[1]). When I try the latest Brooklyn snapshot it basic auth is not enabled. How would I re-enable it? Or do we now need to write a basicauth security provide

Login changes & OAuth support

2019-01-16 Thread Alex Heneveld
Hi All- We've had quite a few requests to support OAuth, and I'm pleased to say we can now support it via plugins. Folks are still working on sample plugins for Google and/or GitHub, but enough is there already for people to write their own to integrate with their choice of OAuth servers.