[WFLY-15260] Support for securing the management console with OIDC #506
Conversation
| http://localhost:MANAGEMENT_PORT/elytron-oidc-client/wildfly-console/index.html). HAL will need to be | ||
| updated to access this endpoint and if it finds OIDC configuration, HAL would then | ||
| redirect to the OIDC provider login page. | ||
| * It will be possible to log out of the management console after having logged in with OIDC. |
There was a problem hiding this comment.
Just local logout of the console, or the complete OIDC logout?
There was a problem hiding this comment.
I think that with the existing support, logging out resulted in the complete OIDC logout. So the idea would be to do the same here.
There was a problem hiding this comment.
Will the logout have effect also on an application deployed into EAP secured by OIDC when we are logged in with the same user?
There was a problem hiding this comment.
Yes, this would also affect an application secured by OIDC with the same user.
| == Test Plan | ||
|
|
||
| Tests will be added to the WildFly testsuite to verify that the management console | ||
| can be secured successfully with OIDC. |
There was a problem hiding this comment.
Simple tests for the logout and for using RBAC would be also useful.
There was a problem hiding this comment.
Will update this section to mention that, thanks @OndrejKotek!
|
Looks good also to me. |
https://issues.redhat.com/browse/WFLY-15260