Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dynamic Sign in options #1703

Open
wants to merge 43 commits into
base: main
Choose a base branch
from

Conversation

davidosorno
Copy link

Description

New Feature
Allow admins to define the sign-in options that will be displayed on OpenSearch Dashboard login page. There are couple of sign-in options defined in Security documentation, and theses options must be available in security config.yml file to be able to change them dynamically in Security Dashboard.

Old Behavior
Admins have to update opensearch_dashboards.yml adding or removing sign-in options, and then restart Dashboards to be able to log in using other sign-in option.

New Behavior
Admins can change sign-in options dynamically without having to restart the Dashboards, and the changes are applied immediately. Users just need to logout in order to see the sign-in options available.

Issues Resolved

Dynamic Sign in options for OpenSearch Dashboards

Related

Security

Testing

Unit Testing, Integration Testing, and Manual Testing.

Check List

  • New functionality includes testing
  • New functionality has been documented
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
Signed-off-by: David Osorno <[email protected]>
@cwperks
Copy link
Member

cwperks commented Dec 20, 2023

Some of the CI checks will fail until opensearch-project/security#3869 is merged.

@davidosorno
Copy link
Author

davidosorno commented Dec 20, 2023

I just found out that if an Admin changes the sign-in options and some users still have their OpenSearch Dashboard login page open with the old options, they still can use them. I'll fix it.

Fixed. The login page validate that the sign-in option is still available.

@davidosorno davidosorno mentioned this pull request Jan 9, 2024
1 task
@davidosorno
Copy link
Author

This commit will cover [FEATURE] Provide login options for anonymous use case.

Copy link
Member

@DarshitChanpura DarshitChanpura left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @davidosorno, could you please look into the file conflict, and the hygiene-check errors. Assuming that the CI will be in a better shape for this PR once opensearch-project/security#3869 is merged and an artifact is available with that change.

server/auth/auth_handler_factory.ts Show resolved Hide resolved
server/routes/index.ts Show resolved Hide resolved
server/routes/index.ts Show resolved Hide resolved
@DarshitChanpura
Copy link
Member

@davidosorno Could you please resolve the conflict?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants