-
Notifications
You must be signed in to change notification settings - Fork 5
Support various dex connectors for login #3996
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
168d32c
to
ca65119
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I could login with both connectors and had admin features 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't feel too confident reviewing the code but it worked for me, too, when I tried it :)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me!
What does this PR do?
This PR adds support for selecting various dex connectors on login. Instead of calling dex with a specific
connector_id
, we now useconnector_filter
to filter the list of connectors, and present users with the appropriate selection list.In order to correctly determine whether the logged in user is an "admin" within happa, we've previously checked whether the user has membership in the group referenced by
window.config.mapiAuthAdminGroup
. Since each identity provider has a different admin group name, this field is now an array of admin groups.What is the effect of this change to users?
For customers:
After clicking on "Proceed to login", users will now be presented with dex's connector selection page of all customer connectors (connectors starting with
customer
).For GS staff:
After navigating to
/admin-login
, users will now be presented with dex's connector selection page of all GS connectors (connectors starting withgiantswarm
).Any background context you can provide?
Closes giantswarm/roadmap#1845.
What is needed from the reviewers?
Verify that logging in presents you with the dex connector selection page, and that logging in using any GS connectors provides you with admin features within happa (i.e. you can see internal app catalogs; you have the "Experiments" selection available to you in the dropdown menu located at the top right corner of the screen).