[Koha-bugs] [Bug 31378] Add a generic OAuth2/OIDC client implementation

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Tue Nov 8 07:09:32 CET 2022


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31378

David Cook <dcook at prosentient.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Signed Off                  |Failed QA

--- Comment #204 from David Cook <dcook at prosentient.com.au> ---
Test plan 1:
0. Apply patches
1. apt install libmojolicious-plugin-oauth2-perl
2. koha-upgrade-schema kohadev
3. restart_all

Test plan 2a (Quarkus Keycloak):
1. Go to http://<workstation_ip>:8082/
2. Click "Administration Console"
3. Login to master realm
4. Click on dropdown menu that says "master"
5. Click "Create Realm"
6. Type "test" into "Realm name" and click "Create"
7. Click "Clients"
8. Click "Create client"
9. Type "test" into "Client ID"
10. Click "Next"
11. Set "Client authentication" to "On"
12. Click "Save"
13. Add "Valid redirect URIs" of "http://localhost:8080/*" and
"http://localhost:8081/*"
14. Click "Credentials" tab and note the "Client secret"
15. Click "Advanced" tab and turn "Exclude Session State From Authentication
Response" to "On" then click "Save"
16. Click "Users" on left nav
17. Click "Create new user"
18. Type "kohadev" into "Username"
19. Type "kohadev at koha-community.org" into Email"
20. Type "Firstname" into "First name"
21. Type "Lastname" into "Last name"
22. Click "Create"
23. Click "Credentials" tab and click "Set password"
24. Choose a password, turn off "Temporary", and click "Save"
25. Click "Realm settings" from the left nav
26. Click "OpenID Endpoint Configuration" at the bottom of the page

Test plan 2b:
1. Go to http://localhost:8081/cgi-bin/koha/admin/admin-home.pl
2. Click on "Identity providers"
3. Click "New identity provider"
4a. Type "test" into "Code"
4b. Type "Test" into "Description"
4c. Choose "OIDC" for "Protocol"
4d. Click "Add default OIDC configuration"
4e. Click "Add default OIDC mapping"
4f. Update "Configuration" to match Keycloak details for "key", "secret", and
"well_known_url"
5. Click on "Manage Domains"
6. Click "Edit" on the default domains
7. Set "Allow staff" and allow update on login and autoregister and click
"Submit"

8. koha-plack --restart kohadev
9. Update OPACBaseURL and staffClientBaseURL to http://localhost:8080 and
http://localhost:8081 respectively

Test plan 3:
1. In an Incognito window or different browser, go to http://localhost:8080,
and try logging in with a user that doesn't exist in Koha

--

I got the following error: 

There was an error authenticating to external identity provider

DBIC result _type isn't of the _type Category at
/usr/share/perl5/DBIx/Class/Storage/BlockRunner.pm line 130.

Looks like auto register doesn't work still...

I changed the email address for the "koha" user to "kohadev at koha-community.org"
at
http://localhost:8081/cgi-bin/koha/members/memberentry.pl?op=modify&destination=circ&borrowernumber=51

Login works, but it doesn't update the user details on login either. 

Going to have to fail this again.

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list