LIP-Computing / oidc-agent

oidc-agent for managing OpenID Connect tokens on the command line

oidc-agent

oidc-agent is a set of tools to manage OpenID Connect tokens and make them easily usable from the command line. We followed the ssh-agent design, so users can handle OIDC tokens in a similar way as they do with ssh keys.

oidc-agent is usually started in the beginning of an X-session or a login session. Through use of environment variables the agent can be located and used to handle OIDC tokens.

The agent initially does not have any account configurations loaded. You can load an account configuration by using oidc-add. Multiple account configurations may be loaded in oidc-agent concurrently. oidc-add is also used to remove a loaded configuration from oidc-agent. oidc-gen is used to initially generate an account configurations file (Help for different providers).

Full documentation can be found at https://indigo-dc.gitbooks.io/oidc-agent/.

We have a low-traffic mailing list with updates such as critical security incidents and new releases: Subscribe oidc-agent-user

Installation

Current releases are available at GitHub or http://repo.data.kit.edu/

Debian Packages

• sudo apt-key adv --keyserver hkp://pgp.surfnet.nl --recv-keys ACDFB08FDC962044D87FF00B512839863D487A87

• Depending on your distribution, choose one of the following lines:

  sudo add-apt-repository "deb http://repo.data.kit.edu/debian/buster ./"
  sudo add-apt-repository "deb http://repo.data.kit.edu/debian/stretch ./"
  sudo add-apt-repository "deb http://repo.data.kit.edu/debian/bullseye ./"
  sudo add-apt-repository "deb http://repo.data.kit.edu/ubuntu/bionic ./"
  sudo add-apt-repository "deb http://repo.data.kit.edu/ubuntu/xenial ./"
  

• sudo apt-get update

• sudo apt-get install oidc-agent

MacOS

brew tap zachmann/x11-ssh-askpass
brew tap indigo-dc/oidc-agent
brew install x11-ssh-askpass
brew install oidc-agent

From Source

Refer to the documentation