You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Michael Boulter (Jira)" <ji...@apache.org> on 2021/10/11 08:02:00 UTC
[jira] [Commented] (KNOX-2534) Allow alias to be used in pac4j
topology block
[ https://issues.apache.org/jira/browse/KNOX-2534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17426996#comment-17426996 ]
Michael Boulter commented on KNOX-2534:
---------------------------------------
Thanks [~amagyar]! Just wondering, would this make it into 1.6.0 and do we know when that release is scheduled for?
> Allow alias to be used in pac4j topology block
> ----------------------------------------------
>
> Key: KNOX-2534
> URL: https://issues.apache.org/jira/browse/KNOX-2534
> Project: Apache Knox
> Issue Type: Improvement
> Components: KnoxSSO
> Reporter: Michael Boulter
> Assignee: Attila Magyar
> Priority: Minor
> Attachments: knoxsso-oidc.xml
>
> Time Spent: 2h
> Remaining Estimate: 0h
>
> We currently use Knox to authenticate users with Microsoft via pac4j federation config.
> We have an OIDC client secret (oidc.secret) stored in plaintext in the topology file but we'd like to obfuscate and not have the plaintext value in the topology XML.
>
> This is because OAuth strongly recommends to have the "client secret" protected.
>
> The alias service currently only seems to work for LDAP, it would be good if we could use it inside our pac4j block too.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)