On 23.05.20 20:58, Adam D. Barratt via RT wrote: > On Sat May 23 08:37:40 2020, pkern wrote: >> I would like to test converting auth.buildd.d.o to OpenID Connect. It >> looks like converting to, say, Flask would depend on a Python module >> that is not in Debian - so the libapache2-mod-auth-openidc module >> looks like an easy choice assuming that it actually forwards enough >> information in headers. The documentation isn't great, but I'd like to >> experiment a bit with it. Could you please install and a2enmod it? > > Pre-emptively added to the metapackage, so: > > Setting up libcjose0 (0.6.1+dfsg1-1) ... > Setting up libhiredis0.14:amd64 (0.14.0-3) ... > Setting up libapache2-mod-auth-openidc (2.3.10.2-1) ... > apache2_invoke: Enable module auth_openidc > Setting up debian.org-buildd.debian.org (69~20200523T184958.1) ... > >> I might end up trying it out on buildd.d.o instead, to avoid the >> client certificate requirement. > > Sounds interesting. (Most things that aren't client certs do, tbh :-p)
Thanks a lot for the swift action. This was surprisingly easy and it looks like https://buildd.debian.org/auth/giveback.cgi DTRT. Obviously that makes using the URL from the console harder but I think the future might be a more sensible web interface in that case. Kind regards Philipp Kern
