[Koha-bugs] [Bug 25796] Allow REST API to use external OAuth2 authorization server

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25796 --- Comment #7 from David Cook <dcook@prosentient.com.au> --- Let's say you're in an ecosystem where you have 1 IdP shared across many apps (all with their own OIDC clients). The end user logs into the Discovery System (DS) using IdP OIDC SSO. It then performs token exchange with the IdP to request an access token for Koha. It then sends that access token to Koha. Koha validates that token (ideally a JWT) using IdP details, performs auth, and then returns the API results. This should actually be pretty easy to do. -- You are receiving this mail because: You are watching all bug changes.