OpenID Connect authentication provider for Sentry
Project description
An SSO provider for Sentry which enables OpenID Connect Apps authentication.
This is a fork of sentry-auth-google.
Why fork, instead of adapting sentry-auth-google to work with every OpenID Connect provider?
The maintainer has different ideas with sentry-auth-google. See:
Install
$ pip install sentry-auth-oidc
Example Setup for Google
Start by creating a project in the Google Developers Console.
In the Authorized redirect URIs add the SSO endpoint for your installation:
https://sentry.example.com/auth/sso/
Naturally other providers, that are supporting OpenID-Connect can also be used (like GitLab).
Finally, obtain the API keys and the well-known account URL and plug them into your sentry.conf.py:
OIDC_CLIENT_ID = ""
OIDC_CLIENT_SECRET = ""
OIDC_SCOPE = "openid email"
OIDC_DOMAIN = "https://accounts.google.com" # e.g. for Google
The OIDC_DOMAIN defines where the OIDC configuration is going to be pulled from. Basically it specifies the OIDC server and adds the path .well-known/openid-configuration to it. That’s where different endpoint paths can be found.
Detailed information can be found in the ProviderConfig specification.
You can also define OIDC_ISSUER to change the default provider name in the UI, even when the OIDC_DOMAIN is set.
If your provider doesn’t support the OIDC_DOMAIN, then you have to set these required endpoints by yourself (autorization_endpoint, token_endpoint, userinfo_endpoint, issuer).
OIDC_AUTHORIZATION_ENDPOINT = "https://accounts.google.com/o/oauth2/v2/auth" # e.g. for Google
OIDC_TOKEN_ENDPOINT = "https://www.googleapis.com/oauth2/v4/token" # e.g. for Google
OIDC_USERINFO_ENDPOINT = "https://www.googleapis.com/oauth2/v3/userinfo" # e.g. for Google
OIDC_ISSUER = "Google"
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for muxa1l-sentry-auth-oidc-5.0.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | d5c423eb7fac474700fa44748b4710379eca054d1bb81940c7df99e78fe176f0 |
|
MD5 | beef85a9b9cd7e3df1e23e27b154e978 |
|
BLAKE2b-256 | a5edb005ed86d3e79b172a613c85d3912d66f7e1cdc9a79b28df183a4444f10e |
Hashes for muxa1l_sentry_auth_oidc-5.0.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 68bc40e6c2ba9f315d9ca959464eedcda028017dc2994c56cc9c2577b30cfe9d |
|
MD5 | d38e3ebb9d9e9a3a63a75bc9d69da52d |
|
BLAKE2b-256 | bc28e42a06f0d503ff26660a4be10c271d788d5f4af92a68dcc762ad9c36f62c |