feat(api): basic support for openid-connect authentication provider

[phsym]

1. Description
   This enables basic integration with openid-connect authentication providers like Keycloak or Hydra

2. About tests
   Not sure yet how to automate the tests here, but for manual testing :

• Setup Keycloak (more here)
  • Start a keycloak server in Docker with docker run -p 4040:8080 -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin quay.io/keycloak/keycloak:11.0.1

  Map internal port 8080 to 4040 to avoid conflict with CDS UI, in case you run everything locally

  • Login to keycoak web UI as admin
  • Create a realm named "cds"
  • Create a user in this realm, add a password to it
  • Create an openid-connect client named "cds_client", set the CDS urls, and change it from public to confidential. Save, and copy the client secrets
  • Edit cds API config to add open id settings as following

  [api.auth.oidc]
        clientId = "cds_client"
        clientSecret = "<CDS CLIENT SECRET>"
        enabled = true
        signupDisabled = false
        url = "http://<KEYCLOAK ADDRESS>:4040/auth/realms/cds"

  <KEYCLOAK ADDRESS> can be localhost if you run everything locally

  • Login on CDS UI using the openid-connect button. You'll e redirected to keycloak login screen. After succesfull login, you'll be redirected to CDS screen.

3. Mentions

@ovh/cds

Signed-off-by: phsym [email protected]

[richardlt]

Hi, thanks for the PR can you provide some tips about how you test it ?

[phsym]

Hi, sure ! I just updated the PR description with the tips

[yesnault]

@phsym Thank you!

Can you take this commit b9eca49 to add openid icon please?

[phsym]

@yesnault Done by merging your branch into mine, but it messed up the DCO check for some reason

EDIT: It's fixed now

[phsym]

Oops sorry, I missclicked on close

[phsym]

I just added a check on the "email_verified" OIDC claim

[fsamin]

Thank you very much to your great contribution. Here are some change requests.

[phsym]

@fsamin Corrections provided based on your comments

[fsamin]

I added 2 suggestions following https://github.com/golang/go/wiki/CodeReviewComments#error-strings

[phsym]

@fsamin Done

[fsamin]

LGTM