Skip to content

Add an embedded OAuth2 issuer#3151

Draft
bbockelm wants to merge 12 commits intoPelicanPlatform:mainfrom
bbockelm:embedded-oauth
Draft

Add an embedded OAuth2 issuer#3151
bbockelm wants to merge 12 commits intoPelicanPlatform:mainfrom
bbockelm:embedded-oauth

Conversation

@bbockelm
Copy link
Collaborator

This is a draft of server-side code that would replace the proxy to the external Java package.

bbockelm and others added 3 commits February 20, 2026 07:41
- Add Client.CredentialFile parameter to docs/parameters.yaml
- Regenerate param files with new Client_CredentialFile parameter
- Add Client_CredentialFile override in GetEncryptedConfigName()
- Add SaveConfigContentsToFile() for saving credentials to specific paths
- Add HasEncryptedPassword() to check if credential file is password-protected
- Create credentials_token_setup.go with the setup subcommand
- Add --no-password, --credential-file, --read, --write flags
- Add tests for new functionality

Co-authored-by: bbockelm <1093447+bbockelm@users.noreply.github.com>
@bbockelm bbockelm linked an issue Feb 21, 2026 that may be closed by this pull request
@bbockelm bbockelm added enhancement New feature or request origin Issue relating to the origin component labels Feb 21, 2026
@bbockelm
Copy link
Collaborator Author

@CannonLock - can you take a look at this? Everything works but the redirect-after-login (which still adds the /view prefix). I would be fine if we switched from server-side rendering of the consent pages to the Next.js application ... but that's well outside my capabilities currently.

Use app router when routing to app and use window routing when routing to page external to app but relative to domain.

Signed-off-by: clock <clock@wisc.edu>
@bbockelm
Copy link
Collaborator Author

@CannonLock - can you fix the Linter issue?

Signed-off-by: clock <clock@wisc.edu>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request origin Issue relating to the origin component

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Embed an OAuth2 issuer in Pelican

3 participants