You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/oauth2-examples-entra-id/index.md
+8-76Lines changed: 8 additions & 76 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,54 +24,14 @@ limitations under the License.
24
24
This guide explains how to set up OAuth 2.0 for RabbitMQ
25
25
and Microsoft Entra ID as Authorization Server using the following flows:
26
26
27
-
<<<<<<< HEAD
28
27
* Access the management UI via a browser using Entra ID (API version 2.0)
29
-
||||||| parent of d7aec1c6 (Remove duplicate lines)
30
-
<<<<<<< HEAD
31
-
* Access the management UI via a browser using v2.0 api version
32
-
=======
33
-
* Access the management UI via a browser using v2.0 api version
34
-
>>>>>>> d7aec1c6 (Remove duplicate lines)
35
-
36
-
<<<<<<< HEAD
37
-
<<<<<<< HEAD
38
-
||||||| parent of 7839e208 (Explain how to configure extra params for authorize and token endpoints)
39
-
=======
40
-
* Access the management UI via a browser.
41
-
>>>>>>> Modify Entra example so that it uses v2.0
42
-
=======
43
-
=======
44
-
* Access the management UI via a browser using v2.0 api version
45
-
46
-
>>>>>>> Explain how to configure extra params for authorize and token endpoints
47
-
>>>>>>> 7839e208 (Explain how to configure extra params for authorize and token endpoints)
48
-
49
-
||||||| parent of d7aec1c6 (Remove duplicate lines)
50
-
=======
51
-
* Access the management UI via a browser using v2.0 api version
52
-
53
-
>>>>>>> Explain how to configure extra params for authorize and token endpoints
54
-
55
-
=======
56
-
>>>>>>> d7aec1c6 (Remove duplicate lines)
28
+
57
29
## Prerequisites to follow this guide
58
30
59
-
* Have an account in https://portal.azure.com.
31
+
* Have an [Azure account](https://portal.azure.com.)
60
32
* Docker
61
-
* Openssl
62
-
<<<<<<< HEAD
33
+
* OpenSSL
63
34
* A local clone of a [GitHub repository](https://github.com/rabbitmq/rabbitmq-oauth2-tutorial/tree/next) (the `next` branch) that contains all the configuration files and scripts used on this example.
64
-
||||||| parent of 7839e208 (Explain how to configure extra params for authorize and token endpoints)
65
-
* A local clone of a [GitHub repository](https://github.com/rabbitmq/rabbitmq-oauth2-tutorial) that contains all the configuration files and scripts used on this example
66
-
=======
67
-
* Docker.
68
-
* Openssl.
69
-
*`git clone https://github.com/rabbitmq/rabbitmq-oauth2-tutorial`. This github repository
70
-
contains all the configuration files and scripts used on this example.
71
-
>>>>>>> Modify Entra example so that it uses v2.0
72
-
=======
73
-
* A local clone of a [GitHub repository](https://github.com/rabbitmq/rabbitmq-oauth2-tutorial) that contains all the configuration files and scripts used on this example
74
-
>>>>>>> 7839e208 (Explain how to configure extra params for authorize and token endpoints)
75
35
76
36
## Register your app
77
37
@@ -101,25 +61,12 @@ When using **Entra ID as OAuth 2.0 server**, your client app (in our case Rabbit
101
61
102
62
5. Click on **Register**.
103
63
104
-

64
+

105
65
106
-
Note the following values, as you will need it later to configure the `rabbitmq_auth_backend_oauth2` on RabbitMQ side:
66
+
Note the following values, as you will need it later to configure the `rabbitmq_auth_backend_oauth2` on RabbitMQ side:
107
67
108
-
<<<<<<< HEAD
109
-
* Directory (tenant ID)
110
-
* Application (client) ID
111
-
||||||| parent of 7839e208 (Explain how to configure extra params for authorize and token endpoints)
112
-
<<<<<<< HEAD
113
-
* **Directory (tenant ID)**
114
-
* **Application (client) ID**
115
-
=======
116
-
* Directory (tenant ID)
117
-
* Application (client) ID
118
-
>>>>>>> Modify Entra example so that it uses v2.0
119
-
=======
120
-
* **Directory (tenant ID)**
121
-
* **Application (client) ID**
122
-
>>>>>>> 7839e208 (Explain how to configure extra params for authorize and token endpoints)
68
+
* Directory (tenant ID)
69
+
* Application (client) ID
123
70
124
71
125
72
## Create OAuth 2.0 roles for your app
@@ -198,16 +145,8 @@ Now that some roles have been created for your application, you still need to as
198
145
199
146
9. Repeat the operations for all the roles you want to assign.
200
147
201
-
<<<<<<< HEAD
202
-
## Create a Scope for Management UI Access
203
-
||||||| parent of 7839e208 (Explain how to configure extra params for authorize and token endpoints)
204
-
<<<<<<< HEAD
148
+
205
149
## Create a Scope for Management UI Access
206
-
=======
207
-
## Create scope required by Management ui during authorization
208
-
=======
209
-
## Create scope required by Management UI during authorization
210
-
>>>>>>> 7839e208 (Explain how to configure extra params for authorize and token endpoints)
211
150
212
151
There is one last configuration step required. Without this step, the `access_token` returned
213
152
by **Entra ID** is invalid. RabbitMQ cannot validate its signature because the `access_token` is meant for Microsoft resources.
@@ -261,15 +200,8 @@ For more information, check out Microsoft Entra documentation about [configuring
261
200
262
201
The configuration on **Entra ID** side is done. Next, configure RabbitMQ to use these resources.
263
202
264
-
<<<<<<< HEAD
265
203
Clone [rabbitmq.conf.tmpl](https://github.com/rabbitmq/rabbitmq-oauth2-tutorial/tree/next/conf/entra/rabbitmq.conf.tmpl) from the tutorial repository
266
204
to `rabbitmq.conf`. It must be in the same directory as `rabbitmq.conf.tmpl`.
267
-
||||||| parent of 7839e208 (Explain how to configure extra params for authorize and token endpoints)
268
-
Clone [rabbitmq.conf.tmpl](https://github.com/rabbitmq/rabbitmq-oauth2-tutorial/tree/main/conf/entra/rabbitmq.conf.tmpl) from the tutorial repository
269
-
to `rabbitmq.conf`. It must be in the same directory as `rabbitmq.conf.tmpl`.
270
-
=======
271
-
Clone the file called [rabbitmq.conf.tmpl](https://github.com/rabbitmq/rabbitmq-oauth2-tutorial/tree/main/conf/entra/rabbitmq.conf.tmpl) as `rabbitmq.conf` (in the same folder as `rabbitmq.conf.tmpl`).
272
-
>>>>>>> 7839e208 (Explain how to configure extra params for authorize and token endpoints)
273
205
274
206
Edit the new `rabbitmq.conf` file and proceed as follows:
0 commit comments