-
Story
-
Resolution: Unresolved
-
Normal
-
1.8.0
-
None
-
RHDH Security 3283, RHDH Security 3284
Story
As a user of RHDH, I want to be able to use secure sign-in resolvers so that I can resolve users logging in with GitHub/GitLab to their respective entity in the catalog based on an immutable ID.
For GitHub:
- Upstream: add GitHub ID in the final ingested user entity
- rhdh repo OR upstream: add sign-in resolver that resolves based on the GitHub ID
For GitLab:
- Upstream: add GitLab ID in the final ingested user entity
- rhdh repo OR upstream: add sign-in resolver that resolves based on the GitLab ID
Background
This is required for security when using multiple auth and catalog providers. It ensures that the user authenticating with a given auth provider is matched with the user in the catalog that came from the same IdP
Dependencies and Blockers
QE impacted work
Documentation impacted work
Acceptance Criteria
upstream documentation updates (design docs, release notes etc)
Technical enablement / Demo