{"push_id":2799106988,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"bab4e635ac1b451b772badc70c9b89da6892ac65","before":"20de92c3465a5fbd5e39a1963689e8df476dd41d","commits":[{"sha":"bab4e635ac1b451b772badc70c9b89da6892ac65","author":{"name":"Paul Millar","email":"e260d3bce7ebdf2b872b611fd23ca302a2bc8a49@desy.de"},"message":"gplazma: oidc support OIDC providers with non-root issuer URLs.\n\nMotivation:\n\nThe OpenID-Connect support in dCache requires the admin to configure\ndCache by listing the trusted providers.  Currently this achieved by\nspecifying the hostname of the providers (e.g., 'accounts.google.com').\nFrom this, the issuer endpoint is assumed to be 'https://' + hostname +\n'/'.  This assumption is not always valid -- the OIDC Issuer endpoint\ncould be running on a non-standard port and use some path other than\n'/'.\n\nThe current configuration (taking the host name) is therefore\nincomplete.\n\nThe configuration is also quite awkward, since client ID and secret are\nspecified in separate maps, which make it more likely that, through a\ntypo, information is missing.\n\nModification:\n\nIntroduce a new configuration option that will (ultimately) capture all\ninformation about an OIDC provider.  Currently this is limited to just\nthe issuer endpoint, but will be extended to support specifying other\ninformation such as the client ID and secret.\n\nThe existing hostname-based configuration is maintained, but marked as\ndeprecated.\n\nAs hinted at earlier, this patch is not the complete solution as support\nfor delegation has not yet been updated to use the new format.  This is\nblocked on improvements to the configuration system.\n\nResult:\n\ndCache may be configured to use an OpenID-Connect provider with an\nissuer endpoint with a non-root path.  However, delegation is not yet\nsupported for such providers.\n\nTarget: master\nRequire-notes: yes\nRequire-book: yes\nPatch: https://rb.dcache.org/r/11085/\nAcked-by: Albert Rossi","distinct":true,"url":"https://api.github.com/repos/indigo-dc/dcache/commits/bab4e635ac1b451b772badc70c9b89da6892ac65"}]}
{"actor":{"display_login":"jstarek"}}