Skip to content

Support OIDC client authorization_parameters #168#170

Merged
m-mohr merged 1 commit intomasterfrom
auth_params
Mar 1, 2026
Merged

Support OIDC client authorization_parameters #168#170
m-mohr merged 1 commit intomasterfrom
auth_params

Conversation

@m-mohr
Copy link
Copy Markdown
Member

@m-mohr m-mohr commented Feb 25, 2026

Adds suppot for the authorization_parameters as intrdocued in openEO API v1.3.0

@m-mohr m-mohr requested a review from flahn February 25, 2026 12:09
@m-mohr m-mohr linked an issue Feb 25, 2026 that may be closed by this pull request
@flahn
Copy link
Copy Markdown
Member

flahn commented Mar 1, 2026

I was wondering if the standalone function login() also needs to be adapted if a user wants to overwrite the authorization_parameters. Currently there is also the parameter "config" where I allowed to pass on "client_credentials", where some parameters could also be added. Unless, of course, the authorization_parameters are always shipped with the client description from the openEO API and the user usually never need to know about those configuration.

Otherwise it should work and looks fine. To recap, the authorization_parameters are passed as they are stated during the negotiation with OIDC provider.

@m-mohr
Copy link
Copy Markdown
Member Author

m-mohr commented Mar 1, 2026

Thank you for the review @flahn!

So the authorization parameters will be attached to the authorization request that the client sends towards the OIDC identity provider. The parameters are a relatively rare use case, currently needed by Google and EGI check-in, which both set a single parameter that is known to the backend and they have to expose that via GET /credentials/oidc. It would be pretty bad UX to ask the user to set these parameters manually through the client, so I'd say unless we find a specific usecase from a backend, it is not needed to adapt the login method.

@m-mohr m-mohr merged commit 059d0a5 into master Mar 1, 2026
8 checks passed
@m-mohr m-mohr deleted the auth_params branch March 1, 2026 23:04
@m-mohr m-mohr added this to the 1.5.0 milestone Mar 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support OIDC client authorization_parameters

2 participants