@david Continuing the discussion from https://github.com/discourse/discourse-openid-connect/pull/7#issuecomment-758082333 As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forw…

Following this with interest — and throwing this in as related Does `sso overrides groups` work with Oauth2? For my use case, I’d be perfectly happy with the Discourse Connect behavior to be implemented for other auth providers.

Great :slight_smile: we’re getting there. [圖片] david: I am a little hesitant about the ‘secondary authorization’ thing, and also the provider_domain column. Can you elaborate some more on why they’re needed? Seems like they’re quite google-specific… is there a reason we can’t request the admin.…

@david I’ve just pushed a few updates on this one including DistributedMutxes and in_batches in group_associated_group Acceptance tests (already had rspec) Will need some further work no doubt, but it’s currently working according to spec and all tests are passing. Take it for a test drive, let m…

Perhaps worth marking it as a non draft for now?

Hi @angus ! I’m curious if you’ve made any further progress on this? I’m very interested in the simple “strict” behavior, as I understand it, and since we control our Oauth2/OpenID connect provider, I’m not worried about the “secondary authorization” case. Any chance that something like that could la…

I’ve put aside time this weekend to work on this Matt. I’ll have an update next week, probably on the PR on github. https://github.com/discourse/discourse/pull/12446

Awesome — thank you so much. I don’t mean to nag, but Discourse Support suggested that posting in this topic would be the best way to see the current state of things. :slight_smile: I’m excited for your work on this, because there is so much we can do with the Fedora discourse sites once we have th…

Note that I’ve made an updated draft PR with a new approach (incorporating changes requested by @david on my last attempt). As mentioned in the comments to the PR, I’m looking to finish it off sometime this week. https://github.com/discourse/discourse/pull/14835

Just so I’m not getting myself excited for no reason — this says “google”… will it also work with non-google oauth2 sso?

It’s a generic system, but the first supported use case will be groups in a google workspace. Once the system is in place adding support for additional providers will not be too difficult.

通过认证管理群组成员

开发

david (David Taylor) 2022年三月11日 11:49 30

我们没有具体的时间表，但如果您想提交补丁，我们非常欢迎 #pr-welcome。

Access to OpenID claims data?

Automatically assign users to groups

話題		回覆	觀看
Memberpress: how to add users to groups upon Sign up WordPress	39	9867	2022年一月9日
Manage group membership in Discourse with WP Discourse SSO Administrators groups , wordpress , payments , how-to	77	18480	2023年五月7日
Allow moderators to add a member to a group? Feature	48	11466	2017年十二月28日
Groups API - manually syncing group membership? Development rest-api	8	1816	2022年十二月13日
Improved Group Members Management Feature rfc , spec	30	11580	2016年一月7日

通过认证管理群组成员

相關主題