This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
сервис_oauth2 [2022/05/17 07:59] val [OpenID Connect authentication module for Apache] |
сервис_oauth2 [2023/11/06 10:39] val [Keycloak] |
||
---|---|---|---|
Line 7: | Line 7: | ||
* [[https://www.ory.sh/run-oauth2-server-open-source-api-security/|ORY Hydra Run your own OAuth2 Server]] | * [[https://www.ory.sh/run-oauth2-server-open-source-api-security/|ORY Hydra Run your own OAuth2 Server]] | ||
* [[https://www.ory.sh/hydra/docs/5min-tutorial/|ORY Hydra 5 Minute Tutorial]] | * [[https://www.ory.sh/hydra/docs/5min-tutorial/|ORY Hydra 5 Minute Tutorial]] | ||
+ | * [[https://github.com/goauthentik/authentik]] | ||
===== Gitlab ===== | ===== Gitlab ===== | ||
- | * [[Инструмент GitLab]] | + | * Инструмент GitLab [[Инструмент GitLab#Сервер OAuth2]] |
- | ===== OpenID Connect authentication module for Apache ===== | + | ===== Keycloak ===== |
- | * [[https://github.com/zmartzone/mod_auth_openidc|Аuthenticates users of a web site against an OpenID Connect Identity Provider or an OAuth 2.0 Authorization Server]] | + | * [[https://www.keycloak.org/getting-started/getting-started-zip|Get started with Keycloak on bare metal]] |
+ | * [[Сервис JRE]] | ||
+ | * [[Пакет OpenSSL#Создание самоподписанного сертификата]] | ||
<code> | <code> | ||
- | # apt install libapache2-mod-auth-openidc | + | server# wget https://github.com/keycloak/keycloak/releases/download/22.0.5/keycloak-22.0.5.zip |
+ | |||
+ | server:~/keycloak-22.0.5# KEYCLOAK_ADMIN=root KEYCLOAK_ADMIN_PASSWORD='strongpassword' bin/kc.sh start-dev --https-certific=/root/server.crt --https-certificate-key-file=/root/server.key | ||
</code> | </code> | ||
- | ==== GitLab ==== | + | * https://server.corp13.un:8443/ |
- | + | ||
- | * [[https://github.com/zmartzone/mod_auth_openidc/wiki/GitLab-OAuth2]] | + | |
<code> | <code> | ||
- | # cat /etc/apache2/sites-available/default-ssl.conf | + | Create Realm->myrealm |
- | </code><code> | + | Users |
- | ... | + | Add User |
- | OIDCProviderMetadataURL https://gitlab.bmstu.ru/.well-known/openid-configuration | + | user1/password1 |
- | OIDCClientID 802..........................................................4c8 | + | Create Client |
- | OIDCClientSecret 991..........................................................5e7 | + | Client ID: test-cgi |
- | OIDCRedirectURI https://val.bmstu.ru/auth-test | + | Valid redirect URIs: http://gate.corp13.un/cgi-bin/test-cgi |
- | OIDCCryptoPassphrase h...any.....string.....j | + | |
- | + | ||
- | <Directory /home/val/auth-test> | + | |
- | Options ExecCGI Indexes FollowSymLinks | + | |
- | AddHandler cgi-script .cgi | + | |
- | DirectoryIndex env.cgi | + | |
- | AuthType openid-connect | + | |
- | Require valid-user | + | |
- | </Directory> | + | |
- | Alias /auth-test "/home/val/auth-test" | + | |
- | ... | + | |
</code> | </code> | ||
- | ==== Тестирование ==== | + | * [[Сервис HTTP#Управление доступом к HTTP серверу с использованием OAuth2 аутентификации]] |
- | + | * [[Настройка KDC серверов и клиентов#Настройка KDC]] | |
- | * !!! В настройках URL без финального "/", при подключении обязательно с ним !!! | + | |
- | + | ||
- | <code> | + | |
- | https://val.bmstu.ru/auth-test/ | + | |
- | </code> | + |