JupyterHub and OIDC extension

[Darren Boss]

Yes, that works for me as well. Thank you very much.

Additionally I created a ca.computecanada.userinfo scope and have eppn
available in that scope and can see persistent volume claims being
created with the format of the eppn when I use username_key: eppn.

On Mon, May 25, 2020 at 2:49 AM Massimiliano Ritossa <ritossa at sissa.it> wrote:
>
> Hi Darren,
>
>    in my jupyterhub configuration doesn't contain “userdata_params”.
> I set'username_key and scope like below:
>
> userdata_method: GET
> username_key: username
> scope:
> - openid
> - profile
> - email
>
> Hope it helps.
>
> MAx
>
> Massimiliano Ritossa
> SISSA Information Technology and Computing Services
> Via Bonomea 265, 34136 Trieste ITALY
> Ph: +39 040 3787552 - www.sissa.it
>
> On 22 May 2020, at 18:30, Darren Boss <darren.boss at computecanada.ca> wrote:
>
> Has anyone been able to get JupyterHub authenticating using the OIDC extension?
>
> I keep getting stale request messages instead of the login. I notice that no claims are in the auth url and I'm not sure how to configure this at the moment using the zero-to-kubernetes helm chart.
>
> These are the values relating to authentication in the chart values file:
> auth:
>   type: custom
>   custom:
>     className: oauthenticator.generic.GenericOAuthenticator
>     config:
>       login_service: "shibboleth"
>       client_id: "jhub"
>       client_secret: "<redacted>"
>       token_url: https://xx.xx.xx.ca/idp/profile/oidc/token
>       userdata_url: https://xx.xx.xx.ca/idp/profile/oidc/userinfo
>       userdata_method: GET
>       userdata_params: {'state': 'state'}
>       username_key: sub
>
> --
> Darren Boss
> Senior Programmer/Analyst
> Programmeur-analyste principal
> darren.boss at computecanada.ca
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



-- 
Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal
darren.boss at computecanada.ca