20210223-minutes.md

Authentication Working Group Minutes

Tuesday, 2021/02/23

10:00 am ET

Attendees:

Terrell Russell, Jason Coposky, Alan King, Dave Fellinger, Kory Draughn, Bo Zhou, Martin Golasowski (IT4I), Tony Edgin (CyVerse), Lazlo Westerhof (Utrecht University), Brett Hartley (Sanger), Mike Conway (NIEHS)

Minutes

SUMMARY:

DISCUSSION

• Can a client (Metalnx) remove its rodsadmin requirement?
  • Yes, Auth should not require proxy privileges
  • As it moves towards a REST-client model, the proxy/admin work is done in the REST layer, not in the client itself
• Utrecht - Web portal working with OIDC
  • Still working on iCommands and WebDAV
  • Mostly UX decisions, passing tokens around, URI really long
• Still need to investigate Keycloak (Consortium)
• Martin using Keycloak already, using with microservice
  • https://github.com/lexis-project/irods_auth_plugin_openid/tree/irods-4.2.8
  • https://github.com/lexis-project/auth_microservice