Skip to content

OIDC support for JFrogToolsInstaller task #590

@bgrossman

Description

@bgrossman

Is your feature request related to a problem? Please describe.
Currently the JFrogToolsInstaller task doesn't support OIDC. I understand why it probably doesn't, because jf hasn't been downloaded yet which exchangeOidcTokenAndSetStepVariables() depends on (using jf eot).

Describe the solution you'd like to see
There could be an alternative/fallback using JFrog APIs rather than jf eot, when jf not found.

Describe alternatives you've considered
Enabling anon access in JFrog works, but it's not acceptable in my environment, nor are pre-shared credentials/tokens which is the only other option with JFrogToolsInstaller.

Additional context
I am happy to implement it and raise PR, but wanted to check first if my proposal would be acceptable before I do anything, i.e. fallback in exchangeOidcTokenAndSetStepVariables() (or separate function) to do token exchange using JFrog APIs.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions