You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "edyan (via GitHub)" <gi...@apache.org> on 2024/04/26 16:37:11 UTC
[I] help request: Resource owner password credentials grant [apisix]
edyan opened a new issue, #11207:
URL: https://github.com/apache/apisix/issues/11207
### Description
Hello, I am doing a POC with Apisix and Casdoor. I wanted to use the flow "Resource owner password credentials grant" to let my user use only their username and password to authenticate to an application. Everything is done programmaticaly. Nevertheless, I don't see an option or a method to do that. It's natively supported by the keycloak plugin ("UMA") but not for openid-connect.
I believe the request rewrite could do the job but I am not sure about security. Thanks for your help !
### Environment
- APISIX version (run `apisix version`): 3.9
- Operating system (run `uname -a`): Redhat (Docker Image apache/apisix:3.9.0-redhat)
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`): See above
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`): Not using etcd but standalone mode
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Resource owner password credentials grant [apisix]
Posted by "shreemaan-abhishek (via GitHub)" <gi...@apache.org>.
shreemaan-abhishek commented on issue #11207:
URL: https://github.com/apache/apisix/issues/11207#issuecomment-2081943421
I find it difficult to understand your problem. Right now, it seems that you are trying to use a feature from Casdoor but it doesn't work.
Are there any error logs?
Is APISIX missing some configuration parameters?
?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Resource owner password credentials grant [apisix]
Posted by "edyan (via GitHub)" <gi...@apache.org>.
edyan commented on issue #11207:
URL: https://github.com/apache/apisix/issues/11207#issuecomment-2082095910
Hello,
_The Resource Owner Password Credentials (ROPC) grant flow lets the client use the resource owner's user name and password to get an access token._
I have an API behind APISIX. APISIX check the authentication via Casdoor. When a user wants to get a token for the API, it goes to Casdoor, request a token by providing a client_id, username and password.
I would like to hide the client_id and that the user only provides his username / password. Exactly like what the keycloak plugin does : https://apisix.apache.org/docs/apisix/3.1/plugins/authz-keycloak/#generating-a-token-using-password-grant
Is it something I need to code myself or is it something that apisix is able to natively handle ?
Thanks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Resource owner password credentials grant [apisix]
Posted by "shreemaan-abhishek (via GitHub)" <gi...@apache.org>.
shreemaan-abhishek commented on issue #11207:
URL: https://github.com/apache/apisix/issues/11207#issuecomment-2083049886
I have minimal experience in working with the casdoor/keycloak/oidc plugins but I can confirm that `client-secret` is a required field for `authz-casdoor` plugin.
https://github.com/shreemaan-abhishek/apisix/blob/07b3cc3f63db8fc4ae3706baa324a76ee3049338/apisix/plugins/authz-casdoor.lua#L36-L38
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] feat: `authz-casdoor` should support fetching access token using username and password [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #11207: feat: `authz-casdoor` should support fetching access token using username and password
URL: https://github.com/apache/apisix/issues/11207
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] feat: `authz-casdoor` should support fetching access token using username and password [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #11207:
URL: https://github.com/apache/apisix/issues/11207#issuecomment-2816639784
This issue has been marked as stale due to 350 days of inactivity. It will be closed in 2 weeks if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] feat: `authz-casdoor` should support fetching access token using username and password [apisix]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #11207:
URL: https://github.com/apache/apisix/issues/11207#issuecomment-2848551727
This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org