OCA/server-auth

auth_from_jwt

ayushin opened this issue · 3 comments

Hi,

Now that there is auth_jwt and auth_from_remote_user I wonder why there is not auth_from_jwt that would create a session and sign user in?

I guess I miss something architecture wise? @sbidoul

@ayushin auth_jwt has a user_id_strategy that is meant to be extended.

If you need a full Odoo sign in, you may also be interested in auth_oidc for an OpenId Connect implementation.

I saw that thank you! What I need is to sign in user by url redirect from another backend where the user is already authorised without the user knowing it is being signed in again.

I am not an expert with Openid but I believe the flow has to be initiated by the user and there will be some auth screens in between?

For now what I have in mind is to direct user with JWT header pre-set by another backend to some jwt endpoint that would do what auth/session does and redirect it to the final url.

Not sure how user_id_strategy helps me with that? @sbidoul

There hasn't been any activity on this issue in the past 6 months, so it has been marked as stale and it will be closed automatically if no further activity occurs in the next 30 days.
If you want this issue to never become stale, please ask a PSC member to apply the "no stale" label.