JupyterHub and OIDC extension

[Massimiliano Ritossa]

Hi Darren,

   in my jupyterhub configuration doesn't contain “userdata_params”.
I set'username_key and scope like below:

        userdata_method: GET
        username_key: username
        scope: 
          - openid 
          - profile 
          - email

Hope it helps.

MAx

Massimiliano Ritossa
SISSA Information Technology and Computing Services
Via Bonomea 265, 34136 Trieste ITALY
Ph: +39 040 3787552 - www.sissa.it

> On 22 May 2020, at 18:30, Darren Boss <darren.boss at computecanada.ca> wrote:
> 
> Has anyone been able to get JupyterHub authenticating using the OIDC extension?
> 
> I keep getting stale request messages instead of the login. I notice that no claims are in the auth url and I'm not sure how to configure this at the moment using the zero-to-kubernetes helm chart.
> 
> These are the values relating to authentication in the chart values file:
> auth:
>   type: custom
>   custom:
>     className: oauthenticator.generic.GenericOAuthenticator
>     config:
>       login_service: "shibboleth"
>       client_id: "jhub"
>       client_secret: "<redacted>"
>       token_url: https://xx.xx.xx.ca/idp/profile/oidc/token <https://xx.xx.xx.ca/idp/profile/oidc/token>
>       userdata_url: https://xx.xx.xx.ca/idp/profile/oidc/userinfo <https://xx.xx.xx.ca/idp/profile/oidc/userinfo>
>       userdata_method: GET
>       userdata_params: {'state': 'state'}
>       username_key: sub
> 
> -- 
> Darren Boss
> Senior Programmer/Analyst
> Programmeur-analyste principal
> darren.boss at computecanada.ca <mailto:darren.boss at computecanada.ca>-- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200525/2d8a86ad/attachment.htm>