OAuth connection of discourse

[Vijay_Vantipalli]

Hi Team

For connecting my locally deployed discourse application to my internal OAuth service can I just connect it using client ID and client secret entered into the google OAuth fields in the login settings of the application?

[david (David Taylor)]

No, the google oauth2 settings will only work for connecting to google. To connect to a custom OAuth2 service, you should take a look at

Discourse OAuth2 Basic

Summary Discourse OAuth2 Basic supports basic OAuth2 providers, assuming they have a JSON API endpoint where user details can be retrieved by token. Repository Link https://github.com/discourse/discourse-oauth2-basic Install Guide How to install plugins in Discourse Features This plugin allows you to use a basic OAuth2 provider as authentication for Discourse. It should work with many providers, with the caveat that they must provid…

Or if your IDP support OpenID Connect, this plugin will be simpler to configure:

Discourse OpenID Connect

Summary Discourse OpenID Connect allows an OpenID Connect provider to be used as an authentication provider for Discourse. Repository Link https://github.com/discourse/discourse-openid-connect Install Guide How to install plugins in Discourse Features The plugin aims to provide a minimal implementation of the specification. Specifically, it supports the “Authorization Code Flow”. To get started, follow the plugin installation instru…

[Vijay_Vantipalli]

Hi David

What exactly is openid connect discovery document. Is it the URL of my OAuth service? My OAuth service generates a client ID and client secret once I add a URL of discourse application to it and when I select the application it will have a endpoint. Should I copy that URL into this field?

[david (David Taylor)]

If your identity service does not have an openid connect discovery document, then you will need to use the OAuth2 Basic plugin (the first link above).