@david Continuing the discussion from https://github.com/discourse/discourse-openid-connect/pull/7#issuecomment-758082333 As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forw…

Following this with interest — and throwing this in as related Does `sso overrides groups` work with Oauth2? For my use case, I’d be perfectly happy with the Discourse Connect behavior to be implemented for other auth providers.

Great :slight_smile: we’re getting there. [이미지] david: I am a little hesitant about the ‘secondary authorization’ thing, and also the provider_domain column. Can you elaborate some more on why they’re needed? Seems like they’re quite google-specific… is there a reason we can’t request the admin…

@david I’ve just pushed a few updates on this one including DistributedMutxes and in_batches in group_associated_group Acceptance tests (already had rspec) Will need some further work no doubt, but it’s currently working according to spec and all tests are passing. Take it for a test drive, let m…

Perhaps worth marking it as a non draft for now?

Hi @angus ! I’m curious if you’ve made any further progress on this? I’m very interested in the simple “strict” behavior, as I understand it, and since we control our Oauth2/OpenID connect provider, I’m not worried about the “secondary authorization” case. Any chance that something like that could la…

I’ve put aside time this weekend to work on this Matt. I’ll have an update next week, probably on the PR on github. https://github.com/discourse/discourse/pull/12446

Awesome — thank you so much. I don’t mean to nag, but Discourse Support suggested that posting in this topic would be the best way to see the current state of things. :slight_smile: I’m excited for your work on this, because there is so much we can do with the Fedora discourse sites once we have th…

Note that I’ve made an updated draft PR with a new approach (incorporating changes requested by @david on my last attempt). As mentioned in the comments to the PR, I’m looking to finish it off sometime this week. https://github.com/discourse/discourse/pull/14835

Just so I’m not getting myself excited for no reason — this says “google”… will it also work with non-google oauth2 sso?

It’s a generic system, but the first supported use case will be groups in a google workspace. Once the system is in place adding support for additional providers will not be too difficult.

인증으로 그룹 멤버십 관리

개발

david (David Taylor) 3월 11, 2022, 11:49오전 30

구체적인 타임라인은 없지만, 패치를 제출하고 싶으시다면 #pr-welcome입니다.

Access to OpenID claims data?

Automatically assign users to groups

글		댓글	조회수
Memberpress: how to add users to groups upon Sign up WordPress	39	10036	1월 9, 2022
Manage group membership in Discourse with WP Discourse SSO Administrators groups , wordpress , payments , how-to	77	18845	5월 7, 2023
Allow moderators to add a member to a group? Feature	48	11579	12월 28, 2017
Groups API - manually syncing group membership? Development rest-api	8	1832	12월 13, 2022
Improved Group Members Management Feature rfc , spec	30	11671	1월 7, 2016

인증으로 그룹 멤버십 관리

Related topics