[jira] [Updated] (KNOX-2534) Allow alias to be used in pac4j topology block

["Attila Magyar (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KNOX-2534?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Attila Magyar updated KNOX-2534:
--------------------------------
    Status: Patch Available  (was: Open)

> Allow alias to be used in pac4j topology block
> ----------------------------------------------
>
>                 Key: KNOX-2534
>                 URL: https://issues.apache.org/jira/browse/KNOX-2534
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: KnoxSSO
>            Reporter: Michael Boulter
>            Assignee: Attila Magyar
>            Priority: Minor
>         Attachments: knoxsso-oidc.xml
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> We currently use Knox to authenticate users with Microsoft via pac4j federation config. 
> We have an OIDC client secret (oidc.secret) stored in plaintext in the topology file but we'd like to obfuscate and not have the plaintext value in the topology XML.
>  
> This is because OAuth strongly recommends to have the "client secret" protected.
>  
> The alias service currently only seems to work for LDAP, it would be good if we could use it inside our pac4j block too.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)