[GitHub] [druid] himanshug edited a comment on pull request #8992: druid extension for OpenID Connect auth using pac4j lib

[GitBox <gi...@apache.org>]

himanshug edited a comment on pull request #8992:
URL: https://github.com/apache/druid/pull/8992#issuecomment-691249868


   @shashisingh you can have something like below and that should work...
   
   ```
   druid.extensions.loadList=[...,"druid-pac4j","druid-basic-security",...]
   
   druid.auth.authenticatorChain=["MyBasicMetadataAuthenticator", "pac4j"]
   
   druid.auth.pac4j.* properties... that you already have and working
   
   druid.auth.authenticator.pac4j.authorizerName=MyBasicMetadataAuthorizer
   druid.auth.authenticator.MyBasicMetadataAuthenticator.type=basic
   druid.auth.authenticator.MyBasicMetadataAuthenticator.authorizerName=allowAll
   
   druid.auth.authorizers=["MyBasicMetadataAuthorizer", "allowAll"]
   druid.auth.authorizer.allowAll.type=allowAll
   druid.auth.authorizer.MyBasicMetadataAuthorizer.type=basic
   druid.auth.authorizer.MyBasicMetadataAuthorizer.enableCacheNotifications=true
   druid.auth.authorizer.MyBasicMetadataAuthorizer.roleProvider.type=context
   druid.auth.authorizer.MyBasicMetadataAuthorizer.initialAdminRole=admin
   
   druid.escalator.type=basic
   druid.escalator.internalClientUsername=druid_system
   druid.escalator.internalClientPassword=desired_password_xx
   druid.escalator.authorizerName=allowAll
   druid.auth.authenticator.MyBasicMetadataAuthenticator.initialInternalClientPassword=desired_password_xx
   ```
   
   also please read the docs in https://druid.apache.org/docs/latest/development/extensions-core/druid-basic-security.html


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org