{"action":"created","issue":{"url":"https://api.github.com/repos/theferrit32/data-commons-workspace/issues/21","repository_url":"https://api.github.com/repos/theferrit32/data-commons-workspace","labels_url":"https://api.github.com/repos/theferrit32/data-commons-workspace/issues/21/labels{/name}","comments_url":"https://api.github.com/repos/theferrit32/data-commons-workspace/issues/21/comments","events_url":"https://api.github.com/repos/theferrit32/data-commons-workspace/issues/21/events","html_url":"https://github.com/theferrit32/data-commons-workspace/issues/21","id":312650638,"node_id":"MDU6SXNzdWUzMTI2NTA2Mzg=","number":21,"title":"create OpenID login option on the helium launcher script","user":{"login":"theferrit32","id":2839238,"node_id":"MDQ6VXNlcjI4MzkyMzg=","avatar_url":"https://avatars2.githubusercontent.com/u/2839238?v=4","gravatar_id":"","url":"https://api.github.com/users/theferrit32","html_url":"https://github.com/theferrit32","followers_url":"https://api.github.com/users/theferrit32/followers","following_url":"https://api.github.com/users/theferrit32/following{/other_user}","gists_url":"https://api.github.com/users/theferrit32/gists{/gist_id}","starred_url":"https://api.github.com/users/theferrit32/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theferrit32/subscriptions","organizations_url":"https://api.github.com/users/theferrit32/orgs","repos_url":"https://api.github.com/users/theferrit32/repos","events_url":"https://api.github.com/users/theferrit32/events{/privacy}","received_events_url":"https://api.github.com/users/theferrit32/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"theferrit32","id":2839238,"node_id":"MDQ6VXNlcjI4MzkyMzg=","avatar_url":"https://avatars2.githubusercontent.com/u/2839238?v=4","gravatar_id":"","url":"https://api.github.com/users/theferrit32","html_url":"https://github.com/theferrit32","followers_url":"https://api.github.com/users/theferrit32/followers","following_url":"https://api.github.com/users/theferrit32/following{/other_user}","gists_url":"https://api.github.com/users/theferrit32/gists{/gist_id}","starred_url":"https://api.github.com/users/theferrit32/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theferrit32/subscriptions","organizations_url":"https://api.github.com/users/theferrit32/orgs","repos_url":"https://api.github.com/users/theferrit32/repos","events_url":"https://api.github.com/users/theferrit32/events{/privacy}","received_events_url":"https://api.github.com/users/theferrit32/received_events","type":"User","site_admin":false},"assignees":[{"login":"theferrit32","id":2839238,"node_id":"MDQ6VXNlcjI4MzkyMzg=","avatar_url":"https://avatars2.githubusercontent.com/u/2839238?v=4","gravatar_id":"","url":"https://api.github.com/users/theferrit32","html_url":"https://github.com/theferrit32","followers_url":"https://api.github.com/users/theferrit32/followers","following_url":"https://api.github.com/users/theferrit32/following{/other_user}","gists_url":"https://api.github.com/users/theferrit32/gists{/gist_id}","starred_url":"https://api.github.com/users/theferrit32/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theferrit32/subscriptions","organizations_url":"https://api.github.com/users/theferrit32/orgs","repos_url":"https://api.github.com/users/theferrit32/repos","events_url":"https://api.github.com/users/theferrit32/events{/privacy}","received_events_url":"https://api.github.com/users/theferrit32/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-04-09T19:10:05Z","updated_at":"2018-06-19T00:38:05Z","closed_at":"2018-06-19T00:38:05Z","author_association":"OWNER","body":"right now to connect to iRODS, requires a username and password pair.\r\n\r\nThe OpenID Connect iRODS auth plugin does not use a password, it uses an asynchronous login flow through a webpage. \r\n\r\n1. Install the iRODS OpenID auth plugin in the base image.\r\n2. Add an option to bin/helium called '-oidc' which takes the place of the password option, and as an argument it takes the provider name that the user wishes to use.  This provider name maps to a configuration in the auth_microservice that the iRODS server instance is connected to.\r\n3. This option will inject the 'irods_authentication_scheme' and 'openid_provider' keys into the irods_environment.json file.\r\n4. It may run iinit with an empty password if this is possible to automate by injecting a newline char to stdin.  If not, the user will be required to manually run iinit upon launching the container."},"comment":{"url":"https://api.github.com/repos/theferrit32/data-commons-workspace/issues/comments/398237916","html_url":"https://github.com/theferrit32/data-commons-workspace/issues/21#issuecomment-398237916","issue_url":"https://api.github.com/repos/theferrit32/data-commons-workspace/issues/21","id":398237916,"node_id":"MDEyOklzc3VlQ29tbWVudDM5ODIzNzkxNg==","user":{"login":"theferrit32","id":2839238,"node_id":"MDQ6VXNlcjI4MzkyMzg=","avatar_url":"https://avatars2.githubusercontent.com/u/2839238?v=4","gravatar_id":"","url":"https://api.github.com/users/theferrit32","html_url":"https://github.com/theferrit32","followers_url":"https://api.github.com/users/theferrit32/followers","following_url":"https://api.github.com/users/theferrit32/following{/other_user}","gists_url":"https://api.github.com/users/theferrit32/gists{/gist_id}","starred_url":"https://api.github.com/users/theferrit32/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theferrit32/subscriptions","organizations_url":"https://api.github.com/users/theferrit32/orgs","repos_url":"https://api.github.com/users/theferrit32/repos","events_url":"https://api.github.com/users/theferrit32/events{/privacy}","received_events_url":"https://api.github.com/users/theferrit32/received_events","type":"User","site_admin":false},"created_at":"2018-06-19T00:38:05Z","updated_at":"2018-06-19T00:38:05Z","author_association":"OWNER","body":"env variables IRODS_AUTHENTICATION_SCHEME and IRODS_ACCESS_TOKEN can be used in the docker containers in place of or to override IRODS_PASSWORD. \r\n\r\nIRODS_AUTHENTICATION_SCHEME must be set to 'openid'.  \r\n\r\nPython bin script `bin/helium.py` can automate this. Requires Python 3.3+\r\n\r\nAs an example, to launch a base image for toil using OpenID Authentication to iRODS:\r\n```\r\n$ python bin/helium.py run base \\\r\n    -U krferrit@unc.edu \\\r\n    -T <access_token> \\\r\n    --toil\r\n```"}}
{"actor":{"display_login":"theferrit32"}}