Skip to content
This repository has been archived by the owner on Mar 17, 2023. It is now read-only.

Use OAuthClient to authenticate users to be able to gather more information #73

Open
vpavlin opened this issue Jan 21, 2021 · 1 comment
Labels
enhancement New feature or request

Comments

@vpavlin
Copy link

vpavlin commented Jan 21, 2021

Is your feature request related to a problem? Please describe.
Currently, JH only has access to basic information about the user - i.e. username. We'd like to be able to at least access groups information, but ideally also user's OpenShift token to be able to pass it into their Jupyter environment

Describe the solution you'd like

  1. We need to create an OAuthClient resource on deployment
  2. The JH config then needs to use OAuthClient name as client_id and the same secret specified in the OAuthClient
  3. We need load the user information when we need it by calling
    auth_state = yield spawner.user.get_auth_state() #this has to be run in @gen.coroutine annotated method
    
  4. Implement groups and token passage into JupyterHub SIngleuser Profiles

Describe alternatives you've considered
No alternative methods

Additional context

@vpavlin vpavlin added the enhancement New feature or request label Jan 21, 2021
@wseaton
Copy link

wseaton commented Jan 22, 2021

@vpavlin I have code examples of how to accomplish 3 and 4 w/ LDAP (passing auth state to the spawner and modifying the pod spec) if you want to compare notes, this piece should work the same for any authenticator.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants