Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FEATURE] Support UserInfo Endpoint for OpenID #2040

Open
Martin-Kemp opened this issue Aug 22, 2022 · 5 comments · May be fixed by #4649
Open

[FEATURE] Support UserInfo Endpoint for OpenID #2040

Martin-Kemp opened this issue Aug 22, 2022 · 5 comments · May be fixed by #4649
Assignees
@stephen-crawford
Labels
enhancement New feature or request help wanted Community contributions are especially encouraged for these issues. triaged Issues labeled as 'Triaged' have been reviewed and are deemed actionable.

Comments

@Martin-Kemp
Copy link
Contributor

Is your feature request related to a problem?
We're currently trying to use OpenID but can't use it for fine grained authorization because Opensearch does not support the UserInfo Endpoint.

What solution would you like?
Support UserInfo Endpoint as defined by OpenID: https://openid.net/specs/openid-connect-core-1_0.html#UserInfo
This is supported by Elasticsearch through xpack: https://www.elastic.co/guide/en/elasticsearch/reference/current/oidc-guide.html

What alternatives have you considered?
I'm currently trying to get around this by using LDAP attributes but allow-listing only some attributes does not seem to work either: #2032

Do you have any additional context?
Add any other context or screenshots about the feature request here.
@Martin-Kemp Martin-Kemp added enhancement New feature or request untriaged Require the attention of the repository maintainers and may need to be prioritized labels Aug 22, 2022
@DarshitChanpura DarshitChanpura removed the untriaged Require the attention of the repository maintainers and may need to be prioritized label Aug 22, 2022
@DarshitChanpura
Copy link
Member

Thank you for filing this request.

@davidlago davidlago added the triaged Issues labeled as 'Triaged' have been reviewed and are deemed actionable. label Oct 10, 2022
@Martin-Kemp
Copy link
Contributor Author

Martin-Kemp commented Oct 25, 2022 •
edited by peternied
Loading

Not sure if this is frowned upon, but here's how x-pack does it: ...

Obviously I'm not suggesting a copy-paste but might be worth looking at for a reference.

[Edited by @peternied: Removed link to prevent accidental copy/paste error]

@hoilc
Copy link

hoilc commented Nov 11, 2022

😂 We are faced with the same issue. ID token is really not enough.

@geckiss
Copy link

geckiss commented Oct 31, 2023

Hello, any update on this? We would love to see this feature implemented

@peternied peternied added the help wanted Community contributions are especially encouraged for these issues. label Nov 1, 2023
@peternied
Copy link
Member

Thanks for the interest @geckiss we'd welcome a pull request to support this feature.

@stephen-crawford stephen-crawford linked a pull request Aug 15, 2024 that will close this issue
Open
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@stephen-crawford stephen-crawford

Labels
enhancement New feature or request help wanted Community contributions are especially encouraged for these issues. triaged Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add support for OpenId Connect userinfo_endpoint stephen-crawford/security
7 participants
@peternied @davidlago @hoilc @Martin-Kemp @geckiss @DarshitChanpura @stephen-crawford