[Koha-bugs] [Bug 21586] Add generic OpenIDConnect client implementation

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21586

--- Comment #9 from David Cook <dcook at prosentient.com.au> ---
Actually, this one would be great to add as an "Authentication Plugin" for
Koha. 

Looking at my code, the only part of it which doesn't lend itself to a plugin
architecture are the changes to Auth.pm and opac-auth.tt. 

However, we could probably remove the necessity for opac-auth.tt changes.

And we could add hooks into Auth.pm for login and logout. Looking at my code,
those shouldn't be that hard to add. 

--

One of the interesting things with this work was setting up multiple OpenID
Connect providers. I'm not sure how often that would actually be a requirement
(as I think people sometimes use another IdP to federate others together) but
it was originally a requirement for my work, and it's something I've seen other
people ask for online. 

--

Really we should be able to use OpenID Connect against Google and any other
compliant IdP (like Keycloak).

-- 
You are receiving this mail because:
You are watching all bug changes.