1. Description
   This enables basic integration with openid-connect authentication providers like Keycloak or Hydra

2. About tests
   Not sure yet how to automate the tests here, but for manual testing :

• Setup Keycloak (more here)
  • Start a keycloak server in Docker with docker run -p 4040:8080 -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin quay.io/keycloak/keycloak:11.0.1

  Map internal port 8080 to 4040 to avoid conflict with CDS UI, in case you run everything locally

  • Login to keycoak web UI as admin
  • Create a realm named "cds"
  • Create a user in this realm, add a password to it
  • Create an openid-connect client named "cds_client", set the CDS urls, and change it from public to confidential. Save, and copy the client secrets
  • Edit cds API config to add open id settings as following

  [api.auth.oidc]
        clientId = "cds_client"
        clientSecret = "<CDS CLIENT SECRET>"
        enabled = true
        signupDisabled = false
        url = "http://<KEYCLOAK ADDRESS>:4040/auth/realms/cds"

  <KEYCLOAK ADDRESS> can be localhost if you run everything locally

  • Login on CDS UI using the openid-connect button. You'll e redirected to keycloak login screen. After succesfull login, you'll be redirected to CDS screen.

3. Mentions

@ovh/cds

Signed-off-by: phsym [email protected]