[GitHub] [incubator-superset] qiuyuzhou opened a new issue #8545: Can't access `/users/list` and `/users/userinfo` when login by keycloak SSO.

[GitBox <gi...@apache.org>]

qiuyuzhou opened a new issue #8545: Can't access `/users/list` and `/users/userinfo` when login by keycloak SSO.
URL: https://github.com/apache/incubator-superset/issues/8545
 
 
   Succeed to login the existed user with `admin` role.
   After click the users list link, would be redirect to `/login` then has been redirect back to`/superset/welcome` by `/login`.
   
   Enable keycloak sso by [fab-oidc](https://github.com/ministryofjustice/fab-oidc).
   
   In supserset_conf.py:
   ```python
     from flask_appbuilder.security.manager import AUTH_OID
     AUTH_TYPE = AUTH_OID
   
     from fab_oidc.security import SupersetOIDCSecurityManager
     CUSTOM_SECURITY_MANAGER = SupersetOIDCSecurityManager
     OIDC_CLIENT_SECRETS = "/home/superset/oidc_client.json"
     OIDC_SCOPES = ['openid', 'email', 'profile']
   ```
   
   
   Deploy on k8s use helm chart: stable/superset. 
   A customized docker image.
   ```Dockerfile
   ARG SUPERSET_VERSION
   # https://hub.docker.com/r/amancevice/superset/dockerfile
   # https://github.com/amancevice/docker-superset
   FROM amancevice/superset:0.34.1
   
   USER root
   RUN pip install --no-cache-dir pydruid==0.5.7 fab-oidc==0.0.9
   USER superset
   ```

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org