4 ms·
I had to set up a OIDC server so our website could act as the OIDC provider, and I got really surprised how hard that is to do if you really need the most basic
by tucnak 4y ago
I had to set up a OIDC server so our website could act as the OIDC provider, and I got really surprised how hard that is to do if you really need the most basic setup. In fact it seems that everybody would just keep a Keycloak or whatever— in their cluster and would keep it up-to-date with whatever user schema they would have in their app. This felt like too much work for me (I didn't want to maintain a whole extra service to just be able and provide a couple Oauth scopes from our API back-end.) so instead I went on and implemented the server directly in our app using https://github.com/zitadel/oidc https://github.com/zitadel/oidc. In fact this was the only fully-functioning OIDC implementation in Go that I could just plug in and make it work. So big props up to the Zitadel guys, the only worry would be from my side that the server implementation could be more generic and could rely on a set of interfaces that the users would be able to implement easily, without having to import a bunch of code from 'examples/server' like we have to do at the moment?
- livio-a 4y agoThanks for the great feedback. I can see copy/paste issue of the server example. We'll definitely improve this in the future so you won't have to implement a lot of logic in the storage implementation.
- mooreds 4y agoHmmm. Did you look at any of the libraries mentioned here: https://oauth.net/code/go/ https://oauth.net/code/go/ I'm not in the golang world, so curious how useful that list is.