Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feat]: Datasources are tied to a specific authentication configuration #1397

Open
1 task done
nangelov-eti opened this issue Dec 18, 2024 · 1 comment
Open
1 task done
Assignees
Labels
API-Service Backend Java Spring for the Lowcoder API Javascript Frontend Pull requests that update Javascript code

Comments

@nangelov-eti
Copy link

nangelov-eti commented Dec 18, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

There is a bug where datasources are being authenticated against a specific authentication provider configuration, instead of automatically inheriting the authentication context from the user's login session.

Expected Behavior

Datasources should automatically inherit authentication from the user's login session and should not be tied to a specific authentication configuration.

Steps to reproduce

  1. Log in as admin and create two generic OAuth providers (in our case, Keycloak), each representing a different realm.
  2. Log out and log in using one of the two generic providers.
  3. Create a datasource and set Authentication Type to OAuth2.0 (Inherit from login) and User Authentication Source to GENERIC.
    Screenshot 2024-12-18 142521
  4. Now log out and log in with the other generic provider.
  5. Observe that the datasource is linked to a specific authentication provider configuration, instead of inheriting the authentication from the login session.
    Screenshot 2024-12-18 144040
  6. If this datasource is used by an application, it triggers the following error because it is linked to the first generic OAuth provider, rather than the one we are currently authenticated with.
    Screenshot 2024-12-18 143815

Environment

Lowcoder version 2.4.10 is affected, but it's likely that the issue also impacts the latest version.
mode: ENTERPRISE

Additional Information

We use Keycloak as the OAuth provider to authenticate across multiple Keycloak realms. However, since Lowcoder doesn’t support multiple Keycloak providers, we had to configure separate generic OAuth providers, each representing a different Keycloak realm.

@FalkWolsky
Copy link
Contributor

This is actually not a bug - but you describe very well a necessary feature. We will change the title - and work on it very soon. It is important to have the ability to select if the selection should be automatic. As it does not apply for all possible cases (some cases need this fixed connection - envision for example staged environments) we do not see it as bug.

@FalkWolsky FalkWolsky changed the title [Bug]: Datasources are tied to a specific authentication configuration [Feat]: Datasources are tied to a specific authentication configuration Jan 13, 2025
@FalkWolsky FalkWolsky added Javascript Frontend Pull requests that update Javascript code API-Service Backend Java Spring for the Lowcoder API labels Jan 13, 2025
@FalkWolsky FalkWolsky moved this to 🆕 New in Lowcoder Jan 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
API-Service Backend Java Spring for the Lowcoder API Javascript Frontend Pull requests that update Javascript code
Projects
Status: 🆕 New
Development

No branches or pull requests

4 participants