Uploaded image for project: 'OpenShift Authentication'
  1. OpenShift Authentication
  2. AUTH-443

[4.13.z] Add OAuth2 Authorization Code Grant Flow for login

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Critical Critical
    • openshift-4.13.z
    • openshift-4.13.z
    • None

      This is a backport of 4.14 and 4.15 feature. It requires several PR's to merge, this issue is going to be an umbrella for all the PR's and for documentation to track.

       

       

      In order to secure token usage during oc login, we need to add the capability to oc to login using the OAuth2 Authorization Code Grant Flow through a browser. This will be possible by providing a command line option to oc:

      oc login --web

            [AUTH-443] [4.13.z] Add OAuth2 Authorization Code Grant Flow for login

            Xingxing Xia added a comment -

            rh-ee-irinis seems it forgets to be moved to Closed. Since PRs all merged and QE tested all (with one bug OCPBUGS-23555 filed on HyperShift guest cluster, but it is not 4.13 specific, it occurs on 4.14/4.15 too of which we was not aware when testing 4.14), I BTW close this from Review status. If unintended, please let me know, thanks.

            Xingxing Xia added a comment - rh-ee-irinis seems it forgets to be moved to Closed. Since PRs all merged and QE tested all (with one bug OCPBUGS-23555 filed on HyperShift guest cluster, but it is not 4.13 specific, it occurs on 4.14/4.15 too of which we was not aware when testing 4.14), I BTW close this from Review status. If unintended, please let me know, thanks.

              mfojtik@redhat.com Michal Fojtik (Inactive)
              mfojtik@redhat.com Michal Fojtik (Inactive)
              Ilias Rinis
              Deepak Punia Deepak Punia (Inactive)
              Courtney Bippley Courtney Bippley
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: