Supported authentication mechanisms

Question

Supported authentication mechanisms

mehrdad-shokri opened this issue 4 years ago · comments

There are several authentication methods supported by sync gateway. What mechanisms does this library support? I'm looking specifically for OpenID connect authentications

Bryan Welter · Answer 1 · Sat Jul 04 2020 01:37:11 GMT+0800 (China Standard Time)

Refer to https://docs.couchbase.com/sync-gateway/current/authentication.html on how to do this. This library supports Auth through sessions as well as basic Auth as does the other couchbase lite libraries.

Mehrdad Shokri · Answer 2 · Sat Jul 04 2020 10:00:22 GMT+0800 (China Standard Time)

@bawelter does it support OpenID connect? Since it's available on Sync gateway

Mehrdad Shokri · Answer 3 · Sat Jul 04 2020 10:35:21 GMT+0800 (China Standard Time)

Specifically, I'm looking for cookie authentication in remote replication. I handle session retrieval myself.

Saltech Developers · Answer 4 · Sat Jul 04 2020 21:34:37 GMT+0800 (China Standard Time)

The app is responsible for retrieving the auth provider token and must send it to Sync Gateway which will return a session ID. The session ID can be used to configure the Couchbase Lite replicator or for other HTTP requests to the Sync Gateway REST API. The session Authenticator supports setting a custom cookie name which the session is stored. Otherwise I’m not sure what you mean by cookie authentication. The session id is stored in a cookie though.

Mehrdad Shokri · Answer 5 · Sun Jul 05 2020 01:51:52 GMT+0800 (China Standard Time)

To clarify things, I wanna setup KeyCloack for OpenID connect provider, I'm not sure how to connect this lib to sync gateway through OpenID connect. The doc says that it supports OpenID protocol. But I'm not sure whether I should retrieve session myself and attach to this lib as a cookie or can it be delegated to the lib completely.

Luca Christille · Answer 6 · Sun Jul 05 2020 01:59:47 GMT+0800 (China Standard Time)

Sync Gateway and Couchbase Lite (and consequently this library) support implicit flow only. You'll have to interact with your Open ID provider in order to retrieve an access token, and configure Sync Gateway to be able to verify that token. You can refer to this article in the documentation https://docs.couchbase.com/sync-gateway/current/authentication.html#openid-connect

function1983 · Answer 7 · Tue Oct 19 2021 02:03:33 GMT+0800 (China Standard Time)

Couchbase documentation regarding this subject is honestly not really good. There are alot of gotchas until you figure out the pieces. I wish there is a step-by-step instruction on how to configure sync_gateway to accept google oauth2 and dynamically create an user. It took me the whole day but I am glad now that it works.

Bryan Welter · Answer 8 · Tue Oct 19 2021 03:17:00 GMT+0800 (China Standard Time)

Feel free to provide the documentation through a pull request / README documentation.

Bryan Welter · Answer 9 · Tue Oct 19 2021 03:17:59 GMT+0800 (China Standard Time)

This company is not affiliated with Couchbase.