bonamim opened a new issue, #21273:
URL: https://github.com/apache/superset/issues/21273

   When we created the **Apache Superset** instance we kept the **default login 
form** (_user/pass_).
   
   However, we need to switch to using **Google SSO**. This change has already 
been configured in the development environment, but we have verified the 
following situation:
   
   - If the user already exists with the same email that the person is trying 
to access, the following error message is displayed ❌ 
   
![image](https://user-images.githubusercontent.com/36086878/187737566-a947276e-67eb-4a92-8e06-b030838786cd.png)
   - If the user doesn't exist, a new one is created and everything is normal ✅ 
   
   **Environment**
   - browser type and version: Chrome (Version 104.0.5112.101)
   - superset version: superset version 2.0.0
   - any feature flags active:
     - `ENABLE_TEMPLATE_PROCESSING`
   - The config inside the Pod:
     ```
     config_oauth: |
       CSRF_ENABLED = True
       # This will make sure the redirect_uri is properly computed, even with 
SSL offloading
       ENABLE_PROXY_FIX = True
   
       from flask_appbuilder.security.manager import AUTH_OAUTH
       AUTH_TYPE = AUTH_OAUTH
       OAUTH_PROVIDERS = [
           {
               "name": "google",
               "icon": "fa-google",
               "token_key": "access_token",
               "remote_app": {
                   "client_id": os.getenv("GOOGLE_KEY"),
                   "client_secret": os.getenv("GOOGLE_SECRET"),
                   "api_base_url": "https://www.googleapis.com/oauth2/v2/";,
                   "client_kwargs": {"scope": "email profile"},
                   "request_token_url": None,
                   "access_token_url": 
"https://accounts.google.com/o/oauth2/token";,
                   "authorize_url": "https://accounts.google.com/o/oauth2/auth";,
                   "authorize_params": {"hd": os.getenv("AUTH_DOMAIN", "")}
               },
           }
       ]
   
       # Map Authlib roles to superset roles
       AUTH_ROLE_ADMIN = 'Admin'
       AUTH_ROLE_PUBLIC = 'Public'
   
       # Will allow user self registration, allowing to create Flask users from 
Authorized User
       AUTH_USER_REGISTRATION = True
   
       # The default user self registration role
       AUTH_USER_REGISTRATION_ROLE = "Gamma"
     ```
   
   **Question**
   - Is it possible to reuse or somehow migrate existing users? Because if it 
is not possible, we will lose all relations between the user and the object 
created by him/her.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to