@david Continuing the discussion from https://github.com/discourse/discourse-openid-connect/pull/7#issuecomment-758082333 As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forw…

Following this with interest — and throwing this in as related Does `sso overrides groups` work with Oauth2? For my use case, I’d be perfectly happy with the Discourse Connect behavior to be implemented for other auth providers.

Great :slight_smile: we’re getting there. [画像] david: I am a little hesitant about the ‘secondary authorization’ thing, and also the provider_domain column. Can you elaborate some more on why they’re needed? Seems like they’re quite google-specific… is there a reason we can’t request the admin.…

@david I’ve just pushed a few updates on this one including DistributedMutxes and in_batches in group_associated_group Acceptance tests (already had rspec) Will need some further work no doubt, but it’s currently working according to spec and all tests are passing. Take it for a test drive, let m…

Perhaps worth marking it as a non draft for now?

Hi @angus ! I’m curious if you’ve made any further progress on this? I’m very interested in the simple “strict” behavior, as I understand it, and since we control our Oauth2/OpenID connect provider, I’m not worried about the “secondary authorization” case. Any chance that something like that could la…

I’ve put aside time this weekend to work on this Matt. I’ll have an update next week, probably on the PR on github. https://github.com/discourse/discourse/pull/12446

Awesome — thank you so much. I don’t mean to nag, but Discourse Support suggested that posting in this topic would be the best way to see the current state of things. :slight_smile: I’m excited for your work on this, because there is so much we can do with the Fedora discourse sites once we have th…

Note that I’ve made an updated draft PR with a new approach (incorporating changes requested by @david on my last attempt). As mentioned in the comments to the PR, I’m looking to finish it off sometime this week. https://github.com/discourse/discourse/pull/14835

Just so I’m not getting myself excited for no reason — this says “google”… will it also work with non-google oauth2 sso?

It’s a generic system, but the first supported use case will be groups in a google workspace. Once the system is in place adding support for additional providers will not be too difficult.

認証によるグループメンバーシップの管理

開発

david (David Taylor) 2022 年 3 月 11 日午前 11:49 30

具体的なタイムラインはありませんが、どなたかがパッチを提出したい場合は、喜んでお迎えします pr-welcome

Access to OpenID claims data?

Automatically assign users to groups

トピック		返信	表示
Memberpress: how to add users to groups upon Sign up WordPress	39	9524	2022 年 1 月 9 日
Manage group membership in Discourse with WP Discourse SSO Administrators groups , wordpress , payments , how-to	77	17631	2023 年 5 月 7 日
Allow moderators to add a member to a group? Feature	48	11255	2017 年 12 月 28 日
Groups API - manually syncing group membership? Development rest-api	8	1750	2022 年 12 月 13 日
Improved Group Members Management Feature rfc , spec	30	11380	2016 年 1 月 7 日

認証によるグループメンバーシップの管理

関連トピック