Taiga contrib FAS OpenID auth

The Taiga plugin for FAS (Fedora Account System) authentication.

Flow diagram

Roughly, this is how it works

taiga-front             taiga-back         fedoauth
---------------------------------------------------

 add a FAS
  button
    |
    V
  click  -----ajax------> auth?
                           |
  hidden <----html---------*
form, auto
  submit -----POST-------------------------> auth?
                                               |
                   verify and store <---POST---*
                    user in the db
                           |
  verify <----302----------*
and update
the UI to
say welcome!

Installation

Taiga Back

In your Taiga back python virtualenv install the pip package taiga-contrib-fas-openid-auth with:

  pip install taiga-contrib-fas-openid-auth

Modify your settings/local.py and include the line:

  INSTALLED_APPS += ["taiga_contrib_fas_openid_auth"]

  # We monkey patch the rest_framework exception handler to allow us to do
  # the 302 redirects that we need to do for openid to finish.
  REST_FRAMEWORK[“EXCEPTION_HANDLER”] = "taiga_contrib_fas_openid_auth.services.exception_handler"

Taiga Front

Create the directory structure for the new plugin

  mkdir -p dist/plugins/fas-openid-auth
  mkdir -p dist/plugins/fas-openid-auth/images/contrib

Download in your dist/plugins/ directory of Taiga front the taiga-contrib-fas-openid-auth compiled code:

  cd dist/plugins/fas-openid-auth
  wget "https://raw.githubusercontent.com/fedora-infra/taiga-contrib-fas-openid-auth/$(pip show taiga-contrib-fas-openid-auth | awk '/^version: /{print $2}')/front/dist/fas_openid_auth.js"
  wget "https://raw.githubusercontent.com/fedora-infra/taiga-contrib-fas-openid-auth/$(pip show taiga-contrib-fas-openid-auth | awk '/^version: /{print $2}')/front/dist/fas-openid-auth.json"

Download in your dist/plugins/fas-openid-auth/images/contrib directory of Taiga front the taiga-contrib-fas-openid-auth Fedora icon:

  cd dist/plugins/fas-openid-auth/images/contrib
  wget "https://raw.githubusercontent.com/fedora-infra/taiga-contrib-fas-openid-auth/$(pip show taiga-contrib-fas-openid-auth | awk '/^Version: /{print $2}')/front/images/contrib/fedora-logo.png"

Include in your dist/conf.json in the contribPlugins list the value "/plugins/fas-openid-auth/fas-openid-auth.json":

...
    "contribPlugins": ["/plugins/fas-openid-auth/fas-openid-auth.json"]
...