{"action":"created","issue":{"url":"https://api.github.com/repos/fabric8-services/fabric8-auth/issues/618","repository_url":"https://api.github.com/repos/fabric8-services/fabric8-auth","labels_url":"https://api.github.com/repos/fabric8-services/fabric8-auth/issues/618/labels{/name}","comments_url":"https://api.github.com/repos/fabric8-services/fabric8-auth/issues/618/comments","events_url":"https://api.github.com/repos/fabric8-services/fabric8-auth/issues/618/events","html_url":"https://github.com/fabric8-services/fabric8-auth/pull/618","id":353342328,"node_id":"MDExOlB1bGxSZXF1ZXN0MjEwNDE4Nzk3","number":618,"title":"Separate out userinfo lookup from login","user":{"login":"sbose78","id":545280,"node_id":"MDQ6VXNlcjU0NTI4MA==","avatar_url":"https://avatars3.githubusercontent.com/u/545280?v=4","gravatar_id":"","url":"https://api.github.com/users/sbose78","html_url":"https://github.com/sbose78","followers_url":"https://api.github.com/users/sbose78/followers","following_url":"https://api.github.com/users/sbose78/following{/other_user}","gists_url":"https://api.github.com/users/sbose78/gists{/gist_id}","starred_url":"https://api.github.com/users/sbose78/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sbose78/subscriptions","organizations_url":"https://api.github.com/users/sbose78/orgs","repos_url":"https://api.github.com/users/sbose78/repos","events_url":"https://api.github.com/users/sbose78/events{/privacy}","received_events_url":"https://api.github.com/users/sbose78/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2018-08-23T11:39:13Z","updated_at":"2018-09-10T09:09:45Z","closed_at":null,"author_association":"MEMBER","pull_request":{"url":"https://api.github.com/repos/fabric8-services/fabric8-auth/pulls/618","html_url":"https://github.com/fabric8-services/fabric8-auth/pull/618","diff_url":"https://github.com/fabric8-services/fabric8-auth/pull/618.diff","patch_url":"https://github.com/fabric8-services/fabric8-auth/pull/618.patch"},"body":"**Why?**\r\nWe are dependent on needing a JWT as an access token from the oauth server, to be able to subsequently generate a new token signed by the auth service. This is a bad constraint to have because it makes it hard to enable login using a random oauth server which may not be returning an jwt as an access token.\r\n\r\n**What?**\r\nRemove dependency on requiring a JWT access token during login. \r\n\r\n**How?**\r\n- After login, a distinct API call is made to the 'userinfo' endpoint for fetching identity information for signing the JWT generated by the Auth service - instead of looking up the user info by unwrapping the initial JWT\r\n\r\n- Setup new config variables - all keycloak variables will be gradually deprecated/removed.\r\n   - for oauth 'auth' endpoint \r\n   - for oauth 'token' endpoint\r\n   - for oidc userinfo endpoint\r\nExample: for RHD https://developers.redhat.com/auth/realms/rhd/.well-known/openid-configuration\r\n\r\n\r\n- For local env, the above variables would need to be configured accordingly. For prod-preview and prod, if nothing is configured, it uses the keycloak endpoints."},"comment":{"url":"https://api.github.com/repos/fabric8-services/fabric8-auth/issues/comments/419843186","html_url":"https://github.com/fabric8-services/fabric8-auth/pull/618#issuecomment-419843186","issue_url":"https://api.github.com/repos/fabric8-services/fabric8-auth/issues/618","id":419843186,"node_id":"MDEyOklzc3VlQ29tbWVudDQxOTg0MzE4Ng==","user":{"login":"fabric8cd","id":26630553,"node_id":"MDQ6VXNlcjI2NjMwNTUz","avatar_url":"https://avatars2.githubusercontent.com/u/26630553?v=4","gravatar_id":"","url":"https://api.github.com/users/fabric8cd","html_url":"https://github.com/fabric8cd","followers_url":"https://api.github.com/users/fabric8cd/followers","following_url":"https://api.github.com/users/fabric8cd/following{/other_user}","gists_url":"https://api.github.com/users/fabric8cd/gists{/gist_id}","starred_url":"https://api.github.com/users/fabric8cd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fabric8cd/subscriptions","organizations_url":"https://api.github.com/users/fabric8cd/orgs","repos_url":"https://api.github.com/users/fabric8cd/repos","events_url":"https://api.github.com/users/fabric8cd/events{/privacy}","received_events_url":"https://api.github.com/users/fabric8cd/received_events","type":"User","site_admin":false},"created_at":"2018-09-10T09:09:45Z","updated_at":"2018-09-10T09:09:45Z","author_association":"NONE","body":"@sbose78 snapshot fabric8-auth image is available for testing.  `docker pull docker.io/fabric8/fabric8-auth:SNAPSHOT-PR-618-11`"}}
{"actor":{"display_login":"fabric8cd"}}