You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Fixes#12
REMOVE HTTPS CERT WORKAROUND BEFORE MERGE TO MASTER! MCC instance
with SSO enabled for testing currently has invalid cert chain,
so this is needed as a temporary workaround during development.
Done:
- Renamed existing `AuthProvider` to `BasicAuthProvider`. This
provider will fail with an error notification if it's used
with an MCC instance that requires SSO auth.
- Added new `SsoAuthProvider` for handling all things SSO. This
provider will fail with an error notification if it's used with
an MCC instance that does not support Keycloak SSO auth.
- Moved a few effects out of View.js and into useClusterLoder.js hook
to cut down on module size.
- Added 'SSO support' section to README with instructions on how
to configure the MCC instance's Keycloak Client to work with the
extension since it relies on `lens://` protocol handler requests.
- Added new "Use SSO" checkbox in Login component.
- Added new util.js method to make console logging more helpful
and consistent, replaced all existing `console` calls with new
`logger` calls.
Copy file name to clipboardExpand all lines: README.md
+7-2
Original file line number
Diff line number
Diff line change
@@ -80,9 +80,14 @@ The `prepublishOnly` script will automatically produce a production build in the
80
80
81
81
## Help
82
82
83
-
### SSO not supported
83
+
### SSO support
84
84
85
-
Mirantis Container Cloud instances that use third-party SSO authentication (e.g. Google OAuth) are __not supported__ at this time. We plan on adding support [soon](https://github.com/Mirantis/lens-extension-cc/issues/12).
85
+
Mirantis Container Cloud instances that use third-party SSO authentication via __Keycloak__ are supported.
86
+
87
+
Since the integration leverages the `lens://` URL protocol handling feature for extensions, __Lens 4.1__ is required, and the __Keycloak Client__ of the instance must be configured as follows:
88
+
89
+
- Allow requests from the `"*"` origin. This is because the internal Electron browser used by the Lens App uses a random port. Therefore, the originating URL cannot be predicted.
90
+
- Allow the following redirect URI: `lens://extensions/@mirantis/lens-extension-cc/oauth/code`
0 commit comments