Re: [Geoserver-devel] About cloud native geoserver and security integrations

2024-08-23 Thread Gabriel Roldan
Hi Jody, For the most part, it uses GeoServer security as-is. But it's true the GeoServer OAuth2 plugins haven't been integrated, and I didn't want to, since Spring/Boot provide out of the box OAuth2/OIDC support. For that reason, and in order to avoid duplication and keep the gscloud gateway as

Re: [Geoserver-devel] About cloud native geoserver and security integrations

2024-08-22 Thread Jody Garnett
Okay in a case of RTFM: Advanced ACL system is available through the project GeoServer ACL which > offers the same capacities as GeoFence. > OAuth is available by using the geOrchestra Gateway in replacement of the > GeoServer Cloud one. > So it uses an external security service for authorizatio

[Geoserver-devel] About cloud native geoserver and security integrations

2024-08-22 Thread Jody Garnett
Gabe, Question for you as I look at the spring-framework-6 update and rewriting OIDC support. How does the cloud native geoserver spring boot setup handle security? Does it use the geoserver security system as is - or does it have to do something earlier at the "gateway" level that dispatches to