Skip to content
This repository has been archived by the owner on Aug 8, 2018. It is now read-only.

Implement SSO - POC/MVP #36

Open
13 of 28 tasks
otarza opened this issue Apr 3, 2018 · 0 comments
Open
13 of 28 tasks

Implement SSO - POC/MVP #36

otarza opened this issue Apr 3, 2018 · 0 comments
Assignees

Comments

@otarza
Copy link
Contributor

otarza commented Apr 3, 2018

Followup on #13

Prepare SSO Drupal instance

  • Setup new Docker containers for SSO;
  • Setup initial SSO Drupal installation;
  • Install simple_oauth module;
  • Generate certificates for simple_oauth using omgwtfssl docker container;
  • Configure simple_oauth global settings;
  • Add new Drupal instance to Falcon codebase;
  • Create new simple_oauth client config entity;
  • Test auth token generation according to simple_oauth docs.
  • Create simple_oauth_sso module to support SSO features.
  • Implement auth route and a controller.
  • Implement login form which will authenticate user against simple_oauth;
  • Implement login.js custom library which will handle login form;
  • Implement redirect after authentication;
  • Write documentation on using simple_oauth_sso with simple_oauth.
  • Configure SSO instance for platform.sh;

Implement Drupal 8 sso_client module for backend services

  • Implement custom AuthenticationProvider;
  • Receive auth token from API Bus;
  • Make request to SSO and try to authenticate using auth token;
  • Create "proxy" user if it's new;
  • Store session for the user with same expiration and validation details provided from SSO.
  • If received request with already authenticated valid token and session is not expired yet, authenticate user;

Implement standalone javascript SSO module

  • Implement a login button which will take user to SSO auth route with proper redirect back url in query parameter.
  • Implement a login handler for when user gets back with auth token in query parameter;
  • Store auth token, refresh token and expire date in local storage.
  • Implement auth client which will send auth token to API Bus and gets authenticated user data as a response;
  • Store user data in local storage;
  • Implement token validation handler, so if it's not valid or expired, user should be redirected to SSO auth route;

Prepare API Bus for handling auth requests

  • get to know to API Bus and implement proper way to handle and pass requests from frontend to backend services;
@otarza otarza self-assigned this Apr 4, 2018
kalabro pushed a commit that referenced this issue Apr 27, 2018
[#155188387] Managed redirects; images indexing.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant