use openid login

[alan7622]

Is it still available to use openid login fossology?

[GMishx]

At the moment FOSSology only supports login from username/password or LDAP: https://github.com/fossology/fossology/wiki/External-authentication-configuration

[NicolasToussaint]

Actually, the external authentication in place allows any type of authentication supported by Apache.

Apache is configured to handle the authentication step, and then injects the resulting Headers in the HTTP query. The headers are used by Fossology to log the correct user in.

See general workflow here: https://github.com/fossology/fossology/wiki/External-authentication-configuration#general-workflow

[NicolasToussaint]

btw, the above link provides examples for LDAP and SAML/Shibboleth authentication (currently in production use).
I just updated the page to simplify the LDAP configuration example.

[GMishx]

Ah, my bad. Thank you Nicolas.

[alan7622]

Hello, thank you for noticing I used an apache mod_auth_openidc module.
I integrate it inside the fossology container, and successfully comeout with the login page.
my login page is at: http://localhost:80
my redirectURI is at: http://localhost:80/repo/

After I login, I will redirect to localhost:8082 and not localhost:8082/repo. Are there any settings in the config that may cause this problem?
And the second question is after I redirect to localhost:8082/repo successfully. I just need to set the CONF_EXT_AUTH_ENABLE=true, in the path install/defconf/fossology.conf.in and I can login?, Is my flow correct thank you so much?

LoadModule auth_openidc_module /usr/lib/apache2/modules/mod_auth_openidc.so
OIDCProviderMetadataURL XXXXXXXXXXXX
OIDCClientID XXXXXXXXXXXXXXX
OIDCClientSecret XXXXXXXXXXXXX
OIDCRedirectURI http://localhost:8082/repo/
OIDCCryptoPassphrase alan7622222223434

AuthType openid-connect
require valid-user

[GMishx]

Reading instructions from https://github.com/zmartzone/mod_auth_openidc#quickstart-with-a-generic-openid-connect-provider

The configuration you done looks okay to me. But by default, localhost:80 does not server FOSSology. It only loads at localhost:80/repo. So your redirect URI should be localhost:80/repo

Then you need to set CONF_EXT_AUTH_ENABLE=true and update the CONF_EXT_AUTH_ENV_USER to the variable containing the userid for login.

[alan7622]

Is there any way I can set Header always set Cache-Control "no-cache, no-store, max-age=0", in the apache folder inside fossology, thank you.

[alan7622]

I have a question after using the external authentication login, is there any way to access the Default Administrator access, because it seems that after I login with the external authentication, I don't have the authority to select the other user's access level and also select the other user's top-level folder, thank you a lot

[GMishx]

You can try changing the username of the default administrator (fossy) to your email address.
Otherwise, the authentication can temporarily be changed to password and you can assign other as administrators. Then change to external authentication again.

[alan7622]

@GMishx I first login with the openid login and disconfig the openid login and login with the original login and set myself to full adminstrator, then I got the full administrator after using the openid login, thank you so much

[NicolasToussaint]

@alan7622, you can also hack the database directly :-)

update users set user_perm = 10 where user_name = 'my-user-name';

[alan7622]

@NicolasToussaint smart way, I use this way to solve the problem thanks

[alan7622]

I met about an issue about the openid login with the same code, which works normally before. It seems that the issue is because I pull the latest image fossology/fossology:latest from Docker hub, but when I use the fossology/fossology:3.10.0 base image it works fine. @GMishx @NicolasToussaint It seems the error is from the php code, do you guys have any idea thank you so much.
[Fri May 28 07:26:28.538244 2021] [php7:notice] [pid 344] [client 10.10.0.1:44870] PHP Notice: Undefined index: in /usr/local/share/fossology/lib/php/common-auth.php on line 71
[Fri May 28 07:26:28.617052 2021] [php7:error] [pid 344] [client 10.10.0.1:44870] PHP Fatal error: Uncaught ArgumentCountError: Too few arguments to function add_user(), 8 passed in /usr/local/share/fossology/www/ui/core-auth.php on line 292 and at least 9 expected in /usr/local/share/fossology/lib/php/common-users.php:43\nStack trace:\n#0 /usr/local/share/fossology/www/ui/core-auth.php(292): add_user('alan.hsieh@...', NULL, '$2y$10$/mABOGoI...', 3, 'Alan.Hsieh@...', 'y', '', 1)\n#1 /usr/local/share/fossology/www/ui/core-auth.php(96): core_auth->checkUsernameAndPassword('alan.hsieh@...', 'd5b59c118d17c6e...')\n#2 /usr/local/share/fossology/lib/php/Plugin/FO_Plugin.php(476): core_auth->PostInitialize()\n#3 /usr/local/share/fossology/lib/php/common-plugin.php(229): FO_Plugin->preInstall()\n#4 /usr/local/share/fossology/www/ui/index.php(57): plugin_preinstall()\n#5 {main}\n thrown in /usr/local/share/fossology/lib/php/common-users.php on line 43