@david Continuing the discussion from https://github.com/discourse/discourse-openid-connect/pull/7#issuecomment-758082333 As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forw…

Following this with interest — and throwing this in as related Does `sso overrides groups` work with Oauth2? For my use case, I’d be perfectly happy with the Discourse Connect behavior to be implemented for other auth providers.

Great :slight_smile: we’re getting there. [Bild] david: I am a little hesitant about the ‘secondary authorization’ thing, and also the provider_domain column. Can you elaborate some more on why they’re needed? Seems like they’re quite google-specific… is there a reason we can’t request the admi…

@david I’ve just pushed a few updates on this one including DistributedMutxes and in_batches in group_associated_group Acceptance tests (already had rspec) Will need some further work no doubt, but it’s currently working according to spec and all tests are passing. Take it for a test drive, let m…

Perhaps worth marking it as a non draft for now?

Hi @angus ! I’m curious if you’ve made any further progress on this? I’m very interested in the simple “strict” behavior, as I understand it, and since we control our Oauth2/OpenID connect provider, I’m not worried about the “secondary authorization” case. Any chance that something like that could la…

I’ve put aside time this weekend to work on this Matt. I’ll have an update next week, probably on the PR on github. https://github.com/discourse/discourse/pull/12446

Awesome — thank you so much. I don’t mean to nag, but Discourse Support suggested that posting in this topic would be the best way to see the current state of things. :slight_smile: I’m excited for your work on this, because there is so much we can do with the Fedora discourse sites once we have th…

Note that I’ve made an updated draft PR with a new approach (incorporating changes requested by @david on my last attempt). As mentioned in the comments to the PR, I’m looking to finish it off sometime this week. https://github.com/discourse/discourse/pull/14835

Just so I’m not getting myself excited for no reason — this says “google”… will it also work with non-google oauth2 sso?

It’s a generic system, but the first supported use case will be groups in a google workspace. Once the system is in place adding support for additional providers will not be too difficult.

Verwaltung der Gruppenmitgliedschaft via Authentifizierung

Entwickler

mattdm (Matthew Miller) 8. November 2021 um 14:57 23

Nur damit ich mich nicht umsonst aufrege – hier steht „google“ … funktioniert das auch mit Nicht-Google-OAuth2-SSO?

Thema		Antworten	Aufrufe
Memberpress: how to add users to groups upon Sign up WordPress	39	9924	9. Januar 2022
Manage group membership in Discourse with WP Discourse SSO Administrators groups , wordpress , payments , how-to	77	18641	7. Mai 2023
Allow moderators to add a member to a group? Feature	48	11535	28. Dezember 2017
Groups API - manually syncing group membership? Development rest-api	8	1826	13. Dezember 2022
Improved Group Members Management Feature rfc , spec	30	11624	7. Januar 2016

Verwaltung der Gruppenmitgliedschaft via Authentifizierung

Verwandte Themen