Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix identity platform default_supported_idp_config idp_id #2969

Merged
merged 2 commits into from
Jan 14, 2020

Conversation

slevenick
Copy link
Contributor

@slevenick slevenick commented Jan 13, 2020

Fixes: hashicorp/terraform-provider-google#5390

Allows for idp_id and client_id fields to be configured separately.

Release Note Template for Downstream PRs (will be copied)

identityplatform: fixed `google_identity_platform_default_supported_idp_config` to correctly allow configuration of both `idp_id` and `client_id` separately

@slevenick slevenick changed the title Fix identity platform default_supported_idp_config. Needs separate id… Fix identity platform default_supported_idp_config idp_id Jan 13, 2020
@modular-magician
Copy link
Collaborator

Hi! I'm the modular magician, I work on Magic Modules.
I see that this PR has already had some downstream PRs generated. Any open downstreams are already updated to your most recent commit, 251fd1d.

Pull request statuses

No diff detected in Ansible.
No diff detected in Inspec.

New Pull Requests

I built this PR into one or more new PRs on other repositories, and when those are closed, this PR will also be merged and closed.
depends: hashicorp/terraform-provider-google-beta#1638
depends: GoogleCloudPlatform/terraform-google-conversion#322
depends: hashicorp/terraform-provider-google#5398

@@ -1,5 +1,6 @@
resource "google_identity_platform_default_supported_idp_config" "<%= ctx[:primary_resource_id] %>" {
enabled = true
client_id = "playgames.google.com"
idp_id = "playgames.google.com"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does this mean that anyone who previously configured GCIP will now have to change their config?

Copy link
Contributor Author

@slevenick slevenick Jan 14, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes I don't believe anyone could have successfully configured their IDP config with the client_id and the idp_id as the same value. Generally the client_id would be a generated value, so the API accepts any value, but the correct value would need to be issued by the IDP that is being used for authentication (playgames.google.com in this case).

At least that's my (likely incomplete) understanding of OAuth at this point

slevenick and others added 2 commits January 14, 2020 18:09
Tracked submodules are build/terraform-beta build/terraform-mapper build/terraform build/ansible build/inspec.
@modular-magician modular-magician merged commit 142ec17 into GoogleCloudPlatform:master Jan 14, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Can not create google_identity_platform_default_supported_idp_config
4 participants