FAS & openid application development

[Radka Janekova]

Hi,

please excuse me if this information is somewhere and I failed to find it...

I'm looking for a way to add an application / get an id, to be used in a
web application used to authenticate the user with Fedora account. I did
not see any mention of it in the auth/openid wiki page, I'm assuming that
it would be to create a ticket with infrastructure?

Who would be the right person to talk to about this topic? Willing to spare
a bit of time to provide some guidance? (Czech would be welcome as it is a
local high school intern working on the project, and I'm not entirely
confident in his English :P)

Project details to give you a better picture what am I talking about - A
website where the user will log-in with their Fedora account, then have
some options to choose from, these would be generated based on their
scope/groups ...

Thank you,
Radka

------------------------------
*Radka Janeková*
.NET Engineer, Red Hat
*radka.janek(a)redhat.com <radka.janek(a)redhat.com&gt;*
IRC: radka | Freenode: Rhea

[Neal Gompa]

On Wed, Oct 10, 2018 at 9:24 AM Radka Janekova <radka.janek(a)redhat.com&gt; wrote:
>  Hi,
>
>  please excuse me if this information is somewhere and I failed to find it...
>
>  I'm looking for a way to add an application / get an id, to be used in a web
> application used to authenticate the user with Fedora account. I did not see any mention
> of it in the auth/openid wiki page, I'm assuming that it would be to create a ticket
> with infrastructure?
>
>  Who would be the right person to talk to about this topic? Willing to spare a bit of time
> to provide some guidance? (Czech would be welcome as it is a local high school intern
> working on the project, and I'm not entirely confident in his English :P)
>
>  Project details to give you a better picture what am I talking about - A website where
> the user will log-in with their Fedora account, then have some options to choose from,
> these would be generated based on their scope/groups ...
>  
You should be able to do this out of the gate as-is. If it's Python
based using Flask, you can use `python3-fedora-flask` and source that
module to pre-configure for authentication with FAS. For other
language stacks, take a look at how it works in Python[1] and adapt
accordingly.

[1]: https://github.com/fedora-infra/python-fedora/blob/develop/flask_fas_open...

-- 
真実はいつも一つ！/ Always, there's only one truth!

[Pierre-Yves Chibon]

On Wed, Oct 10, 2018 at 09:36:57AM -0400, Neal Gompa wrote:
>  On Wed, Oct 10, 2018 at 9:24 AM Radka Janekova
> <radka.janek(a)redhat.com&gt; wrote:
>  >
>  > Hi,
>  >
>  > please excuse me if this information is somewhere and I failed to find it...
>  >
>  > I'm looking for a way to add an application / get an id, to be used in a web
> application used to authenticate the user with Fedora account. I did not see any mention
> of it in the auth/openid wiki page, I'm assuming that it would be to create a ticket
> with infrastructure?
>  >
>  > Who would be the right person to talk to about this topic? Willing to spare a bit of
> time to provide some guidance? (Czech would be welcome as it is a local high school intern
> working on the project, and I'm not entirely confident in his English :P)
>  >
>  > Project details to give you a better picture what am I talking about - A website
> where the user will log-in with their Fedora account, then have some options to choose
> from, these would be generated based on their scope/groups ...
>  >
>  
>  You should be able to do this out of the gate as-is. If it's Python
>  based using Flask, you can use `python3-fedora-flask` and source that
>  module to pre-configure for authentication with FAS. For other
>  language stacks, take a look at how it works in Python[1] and adapt
>  accordingly. 
It also depends if you're going to use openid or openid-connect. For the former
there is nothing to do on our end, it's the plain, usual openid protocol.
For the later, that application would need to be registered in our end but for
development purposes you can register against iddev.fedorainfracloud.org see the
"registration" paragraph in https://flask-oidc.readthedocs.io/en/latest/


Pierre

[Radka Janekova]

On Wed, Oct 10, 2018 at 3:58 PM, Pierre-Yves Chibon <pingou(a)pingoured.fr&gt;
wrote:

>  On Wed, Oct 10, 2018 at 09:36:57AM -0400, Neal Gompa wrote:
>  > On Wed, Oct 10, 2018 at 9:24 AM Radka Janekova <radka.janek(a)redhat.com&gt;
>  wrote:
>  > >
>  > > Hi,
>  > >
>  > > please excuse me if this information is somewhere and I failed to find
>  it...
>  > >
>  > > I'm looking for a way to add an application / get an id, to be used in
>  a web application used to authenticate the user with Fedora account. I did
>  not see any mention of it in the auth/openid wiki page, I'm assuming that
>  it would be to create a ticket with infrastructure?
>  > >
>  > > Who would be the right person to talk to about this topic? Willing to
>  spare a bit of time to provide some guidance? (Czech would be welcome as it
>  is a local high school intern working on the project, and I'm not entirely
>  confident in his English :P)
>  > >
>  > > Project details to give you a better picture what am I talking about -
>  A website where the user will log-in with their Fedora account, then have
>  some options to choose from, these would be generated based on their
>  scope/groups ...
>  > >
>  >
>  > You should be able to do this out of the gate as-is. If it's Python
>  > based using Flask, you can use `python3-fedora-flask` and source that
>  > module to pre-configure for authentication with FAS. For other
>  > language stacks, take a look at how it works in Python[1] and adapt
>  > accordingly.
>  
Nope, not python :)


>  It also depends if you're going to use openid or openid-connect. For the
>  former
>  there is nothing to do on our end, it's the plain, usual openid protocol.
>  
That makes sense... and that is the struggle, all the libraries that I can
find are openid-connect >_<


>  For the later, that application would need to be registered in our
> end but
>  for
>  development purposes you can register against iddev.fedorainfracloud.org
>  see the
>  "registration" paragraph in https://flask-oidc.readthedocs.io/en/latest/

Thank you both for the info, I'll take a look at registering it if we won't
find anything useful for "plain" openid.


>  Pierre
>  _______________________________________________
>  infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
>  To unsubscribe send an email to infrastructure-leave@lists.
>  fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives: https://lists.fedoraproject.org/archives/list/
>  infrastructure(a)lists.fedoraproject.org
>

[Brian (bex) Exelbierd]

On Wed, Oct 10, 2018 at 3:25 PM Radka Janekova <radka.janek(a)redhat.com&gt;
wrote:

>  Hi,
>
>  please excuse me if this information is somewhere and I failed to find
>  it...
>
>  I'm looking for a way to add an application / get an id, to be used in a
>  web application used to authenticate the user with Fedora account. I did
>  not see any mention of it in the auth/openid wiki page, I'm assuming that
>  it would be to create a ticket with infrastructure?
>
>  Who would be the right person to talk to about this topic? Willing to
>  spare a bit of time to provide some guidance? (Czech would be welcome as it
>  is a local high school intern working on the project, and I'm not entirely
>  confident in his English :P)
>
>  Project details to give you a better picture what am I talking about - A
>  website where the user will log-in with their Fedora account, then have
>  some options to choose from, these would be generated based on their
>  scope/groups ...
>  
This sounds like a really cool project.  I went looking for
docs/descriptions and didn't see them.  Where can I find it?

Thanks,

bex


>  Thank you,
>  Radka
>
>  ------------------------------
>  *Radka Janeková*
>  .NET Engineer, Red Hat
>  *radka.janek(a)redhat.com <radka.janek(a)redhat.com&gt;*
>  IRC: radka | Freenode: Rhea
>
>  _______________________________________________
>  infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
>  To unsubscribe send an email to
>  infrastructure-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>  

-- 
Brian (bex) Exelbierd | bexelbie(a)redhat.com | bex(a)pobox.com
Fedora Community Action & Impact Coordinator
@bexelbie | http://www.winglemeyer.org

[Radka Janekova]

On Wed, Oct 10, 2018 at 5:31 PM, Brian (bex) Exelbierd <bexelbie(a)redhat.com&gt;
wrote:

>  On Wed, Oct 10, 2018 at 3:25 PM Radka Janekova <radka.janek(a)redhat.com&gt;
>  wrote:
>
> > Hi,
> >
> > please excuse me if this information is somewhere and I failed to find
> > it...
> >
> > I'm looking for a way to add an application / get an id, to be used in a
> > web application used to authenticate the user with Fedora account. I did
> > not see any mention of it in the auth/openid wiki page, I'm assuming that
> > it would be to create a ticket with infrastructure?
> >
> > Who would be the right person to talk to about this topic? Willing to
> > spare a bit of time to provide some guidance? (Czech would be welcome as it
> > is a local high school intern working on the project, and I'm not entirely
> > confident in his English :P)
> >
> > Project details to give you a better picture what am I talking about - A
> > website where the user will log-in with their Fedora account, then have
> > some options to choose from, these would be generated based on their
> > scope/groups ...
> >
>
>  This sounds like a really cool project.  I went looking for
>  docs/descriptions and didn't see them.  Where can I find it?
>  
It's the same project I was proposing for GSOC half a year ago, my intern
was not in the office over the summer holiday so we got to it only now...
Struggling to find a good library for openid right now.
The definition, although at this point slightly out of date (needs to be
updated with more details on fas authentication,) can be found at
https://github.com/Fedora-dotnet/verification-fas-discord-reddit


>  Thanks,
>
>  bex
>
>
> >
> > Thank you,
> > Radka
> >
> > ------------------------------
> > *Radka Janeková*
> > .NET Engineer, Red Hat
> > *radka.janek(a)redhat.com <radka.janek(a)redhat.com&gt;*
> > IRC: radka | Freenode: Rhea
> >
> > _______________________________________________
> > infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
> > To unsubscribe send an email to infrastructure-leave@lists.
> > fedoraproject.org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: https://lists.fedoraproject.org/archives/list/
> > infrastructure(a)lists.fedoraproject.org
> >
>
>
>  --
>  Brian (bex) Exelbierd | bexelbie(a)redhat.com | bex(a)pobox.com
>  Fedora Community Action & Impact Coordinator
>  @bexelbie | http://www.winglemeyer.org
>
>  _______________________________________________
>  infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
>  To unsubscribe send an email to infrastructure-leave@lists.
>  fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives: https://lists.fedoraproject.org/archives/list/
>  infrastructure(a)lists.fedoraproject.org
>
>