<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Darren,<div class=""><br class=""></div><div class=""> in my jupyterhub configuration doesn't contain “userdata_params”.</div><div class="">I set'username_key and scope like below:</div><div class=""><br class=""></div><div class=""><div style="color: rgb(54, 54, 54); background-color: rgb(255, 255, 255); font-family: Menlo, Monaco, "Courier New", monospace; line-height: 18px; white-space: pre;" class=""><div class=""> <span style="color: rgb(63, 151, 223);" class="">userdata_method</span>: <span style="color: rgb(162, 86, 55);" class="">GET</span></div><div class=""> <span style="color: rgb(63, 151, 223);" class="">username_key</span>: <span style="color: rgb(162, 86, 55);" class="">username</span></div><div class=""> <span style="color: rgb(63, 151, 223);" class="">scope</span>: </div><div class=""> - <span style="color: rgb(162, 86, 55);" class="">openid</span> </div><div class=""> - <span style="color: rgb(162, 86, 55);" class="">profile</span> </div><div class=""> - <span style="color: rgb(162, 86, 55);" class="">email</span></div></div></div><div class=""><br class=""></div><div class="">Hope it helps.</div><div class=""><br class=""><div class="">MAx</div><div class=""><br class="webkit-block-placeholder"></div><div class="">
<div>Massimiliano Ritossa<br class="">SISSA Information Technology and Computing Services<br class="">Via Bonomea 265, 34136 Trieste ITALY<br class="">Ph: +39 040 3787552 - <a href="http://www.sissa.it" class="">www.sissa.it</a></div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 22 May 2020, at 18:30, Darren Boss <<a href="mailto:darren.boss@computecanada.ca" class="">darren.boss@computecanada.ca</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="">Has anyone been able to get JupyterHub authenticating using the OIDC extension?</div><div class=""><br class=""></div><div class="">I keep getting stale request messages instead of the login. I notice that no claims are in the auth url and I'm not sure how to configure this at the moment using the zero-to-kubernetes helm chart.</div><div class=""><br class=""></div><div class="">These are the values relating to authentication in the chart values file:</div><div class="">auth:<br class=""> type: custom<br class=""> custom:<br class=""> className: oauthenticator.generic.GenericOAuthenticator<br class=""> config:<br class=""> login_service: "shibboleth"<br class=""> client_id: "jhub"<br class=""> client_secret: "<redacted>"<br class=""> token_url: <a href="https://xx.xx.xx.ca/idp/profile/oidc/token" class="">https://xx.xx.xx.ca/idp/profile/oidc/token</a><br class=""> userdata_url: <a href="https://xx.xx.xx.ca/idp/profile/oidc/userinfo" class="">https://xx.xx.xx.ca/idp/profile/oidc/userinfo</a><br class=""> userdata_method: GET<br class=""> userdata_params: {'state': 'state'}<br class=""> username_key: sub</div><div class=""><br class="">-- <br class=""><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Darren Boss<br class="">Senior Programmer/Analyst<br class="">Programmeur-analyste principal<br class=""><a href="mailto:darren.boss@computecanada.ca" target="_blank" class="">darren.boss@computecanada.ca</a></div></div></div>
-- <br class="">For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" class="">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""></div></blockquote></div><br class=""></div></body></html>