Support for additional Identity/Login Providers?

[cccs-tom]

My team wishes to use one or more IdP that are not GitHub or Eclipse. Our immediate use case is for Azure AD, but we will likely want to use an on-prem IdP (likely Keycloak) at some point in the future as well.

We would be looking (for the time being) at making it possible to change the IdP to something other than GitHub, but not addign support for multiple IdP. Is this something that you would be interested in having us contribute back to your code base?

[amvanbaren]

+1 for Keycloak. It would be nice to decouple user management from the registry.

[spoenemann]

Yes, support for more authentication providers is definitely in the scope of this project, and contributions are welcome!

There is one challenge, though: we currently have a home-grown login handling because we need to support both GitHub and Eclipse OAuth login for the public instance running at open-vsx.org. If it's possible, I would be ok with a solution that keeps the current implementation for the public instance, but switches to something more generic for other instances (this could be controlled via application.yml properties).

[cccs-tom]

@spoenemann Sure, we can definitely work with that! Thanks.

[rangav]

I prefer simple email/username and password login

[zlweicoder]

Any follow up?
+1 for Keycloak!
thanks~

[amvanbaren]

@zlweicoder I have a working prototype/draft for Keycloak integration. It's been a couple months since I last worked on it. I'll commit the changes and link the branch here. Maybe somebody else can pick it up.

[amvanbaren]

This is the Keycloak integration branch: https://github.com/amvanbaren/openvsx/tree/feature/issue-337

[guddu121]

Hi There,

Is there any plan to merge the keycloak branch with openvsx and there are lot of dependencies and changes has been done. If someone can pick do it then would be great.

[guddu121]

HI Amvanbaren,

I want to know any plan in coming days to integrate the branch with keycloak support into openvsx

[amvanbaren]

Hi @guddu121, no there are currently no plans to merge the keycloak branch with openvsx. AFAIK this feature is still a prototype/draft. @zlweicoder did you work on keycloak integration?

[krithika2689]

Hi @amvanbaren @zlweicoder ,
In my company , we were able to successfully fork the keycloak integration branch @amvanbaren had posted , run it locally and configure a simple login flow using basic auth.Our goal is to implement Gitlab Auth for OpenVSX.We have the following two options :

1. With Keycloak :
   If this feature branch (whihc is now quite behind "master" ) can be merged to "master" with all conflicts resolved. We will be happy to test it in our environment and fix any bugs that come up.

2. Without keycloak :
   IF there is no intention to bring keycloak branch upto master , then we will implement gitlab auth on top of the current "master" and will be happy to contribute that back as well.

Please let us know your recommendation