Skip to content

Is it possible to obtain a user session token through SSO? #5716

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
NiklasRosenstein opened this issue Jan 13, 2023 · 2 comments
Closed

Is it possible to obtain a user session token through SSO? #5716

NiklasRosenstein opened this issue Jan 13, 2023 · 2 comments

Comments

@NiklasRosenstein
Copy link
Contributor

NiklasRosenstein commented Jan 13, 2023 •
edited
Loading

I was playing with the thought of integrating GitLab with Coder by leveraging it's existing Gitpod integration. You can point a self-hosted GitLab instance at your own Gitpod instance, and I think that this Gitpod instance might as well be a shim service that actually provisions a Coder workspace instead.

It appears that all GitLab does is to redirect the user to a URL like $YOUR_GITPOD_URL/#https://my-gitlab.com/group/repo/-/tree/develop/.

I would have $YOUR_GITPOD_URL be a small Flask application that asks the user to authenticate via SSO (we use Azure AD) to authorize the application to perform actions in Coder on their behalf; then it would spin up a Workspace for the user and wait until the workspace is set up, etc.

I'm not super familiar with the corresponding SSO/Oauth flows yet, or the Coder API. Is this something that would be possible?
@coadler
Copy link
Contributor

coadler commented Jan 14, 2023

I don't think this is something that would work currently since Coder doesn't have an OAuth server implementation for authorizing 3rd party applications. Though, I believe we are planning on implementing what you may want in #3981. We can probably implement that same example.com/#repo-style URL as well.

@bpmct
Copy link
Member

bpmct commented Feb 15, 2023

I'm pretty sure this will be done with #3981. @kylecarbs can confim

@bpmct bpmct closed this as not planned Won't fix, can't repro, duplicate, stale Feb 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@NiklasRosenstein @coadler @bpmct