Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-5958

fix dangerouslyAllowSignInWithoutUserInCatalog for OIDC auth provider

Create Doc EPIC for Fe...Prepare for Y ReleasePrepare for Z ReleasePrepare Test Plan (Y R...
XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • 1.5.0
    • 1.4.0
    • Authentication
    • None
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • Hide
      = Change in sign-in resolver configuration location
      In the previous release, configuring the sign-in resolver to bypass user provisioning in the {product-short} software catalog required setting dangerouslyAllowSignInWithoutUserInCatalog: true at the root of the {my-app-config-file} file.

      In this release, this configuration has been deprecated at the root level and moved to the resolver configuration section. It now applies specifically to that resolver. For more details, see link:{authentication-book-title}[{authentication-book-url}].
      Show
      = Change in sign-in resolver configuration location In the previous release, configuring the sign-in resolver to bypass user provisioning in the {product-short} software catalog required setting dangerouslyAllowSignInWithoutUserInCatalog: true at the root of the {my-app-config-file} file. In this release, this configuration has been deprecated at the root level and moved to the resolver configuration section. It now applies specifically to that resolver. For more details, see link:{authentication-book-title}[{authentication-book-url}].
    • Deprecated Functionality
    • Done
    • RHDH Security 3270

      Description of problem:

      This config does not work for the following auth providers, but main focus is on OIDC since it's the one we claim support for: 

      • azure-easyauth
      • bitbucket
      • bitbucketServer
      • cfaccess
      • google
      • oidc
      • okta
      • saml

      Steps to Reproduce

      1. try to apply this config with the mentioned providers

      Actual results:

      No change in sign-on behaviour (sign in by users not in the catalog will be rejected)

      Expected results:

      Allow sign in without user existing in the catalog

      Reproducibility (Always/Intermittent/Only Once):

      Always

      Build Details:

      Additional info (Such as Logs, Screenshots, etc):

              rh-ee-jhe Jessica He
              rh-ee-jhe Jessica He
              RHIDP - Security
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: