Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document happy path Google auth and augmentation #33053

Closed
sberyozkin opened this issue May 2, 2023 · 4 comments · Fixed by #36060
Closed

Document happy path Google auth and augmentation #33053

sberyozkin opened this issue May 2, 2023 · 4 comments · Fixed by #36060
Assignees
Milestone

Comments

@sberyozkin
Copy link
Member

sberyozkin commented May 2, 2023

Description

Current OIDC tutorials and reference documents can be considered quite technical and some users might find it challenging to figure out how to setup OIDC.
This issue will continue with the idea of creating Getting Started Fast with Security series of tutorials, with the Basic and JPA tutorial being the first and only such a guide so far, with the plan always being to follow up with something for OIDC.
The next guide will show a Happy path Google authentication with 3 properties only

Implementation ideas

  • Show how to register Quarkus App in Google dashboard
  • Show a simple endpoint injecting ID token and using it to interact with the user
  • Show a typical structure of ID token, explain how it differs from access token
  • The endpoint will show how to logout using the injected OidcSession
  • Security identity augmentor is introduced showing how to augment Google tokens for them to go through RBAC check
  • Make it all work with 3 lines of config only

CC @maxandersen @cescoffier @stuartwdouglas @FroMage @n1hility

@sberyozkin sberyozkin self-assigned this May 2, 2023
@maxandersen
Copy link
Member

A low hanging fruit is to add keywords to existing docs so when you search for "GitHub", "Twitter" etc. It will show up.

@sberyozkin
Copy link
Member Author

sberyozkin commented May 2, 2023

Hi @maxandersen Indeed, thanks for proposing it the first place, #33056. This specific guide will also have a tag, Google in this case, but will have a link for more info the the well-known providers guide (in addition to #33056)

@sberyozkin sberyozkin added the f2f label May 8, 2023
@faermanj
Copy link

This would be super nice, would be glad to help
Another suggestion would be to document where tokens are stored and how they are passed around.

@sberyozkin
Copy link
Member Author

Hi @faermanj

Another suggestion would be to document where tokens are stored and how they are passed around.

It is not Google specific and we try to explain it here:

https://quarkus.io/guides/security-oidc-code-flow-authentication#token-state-manager

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging a pull request may close this issue.

4 participants