OAuth Authentication filter for Share

[gdepourtales]

Hi community,

Just a short message to share a small project.

I just published on Github (https://github.com/gdepourtales/share-oauth-sso). The Alfresco OAuth SSO module lets users login in Alfresco Share using their Google Apps account. The module creates automatically accounts which do not exist to make Share and Google Apps integrate transparently. Configuration uses standard Share Surf configuration.

Use it and fork it 

Guy

[loftux]

Thanks for sharing this project, looks very interesting.

Does it allow for fallback, ie if you are not authenticated via Gapps, can you login with a standard Alfresco account?
The users created, is the user id equals to email?
Is there a way to turn off auto-creation and only allow for pre-created users to login?
Another thing is if one could map existing user id:s to Gapps user ids.

Haven't had the chance to test your add-on, but will do when I find some time.

[gdepourtales]

Hi Loftux

Sorry for the late answer. So here my answers :

<blockquote> Does it allow for fallback, ie if you are not authenticated via Gapps, can you login with a standard Alfresco account?</blockquote>

Yes it does. Aditionnally, you can pass add the bypassOAuth parameter to your request to completely skip oauth redirection.

<blockquote>The users created, is the user id equals to email?</blockquote>
Username is the first part of the email ie for a user with email [email protected], the username will be

first.last‍

<blockquote>Is there a way to turn off auto-creation and only allow for pre-created users to login?</blockquote>
Not yet. but it's a good idea. I will add the feature

<blockquote>Another thing is if one could map existing user id:s to Gapps user ids.</blockquote>
Do you mean openid ?

<blockquote>Haven't had the chance to test your add-on, but will do when I find some time.</blockquote>
Hope you did by now

Cheers
Guy

[khershberg]

I am a bit stuck . I need just a kick start . Please help .

I have followed the instructions … and got 2 jar files

cp /usr/local/src/share-oauth-2.2.jar /opt/alfresco-4.2.e/tomcat/webapps/share/WEB-INF/lib/share-oauth-2.2.jar
cp /usr/local/src/scribe-1.3.5.jar /opt/alfresco-4.2.e/tomcat/webapps/share/WEB-INF/lib/share-oauth-2.2.jar

And copied it to the location. Then i changed web.xml with :

<filter>
    <description>Oauth Authentication Support</description>
    <filter-name>OAuthAuthenticationFilter</filter-name>
    <filter-class>ch.gadp.alfresco.OAuthSSOAuthenticationFilter</filter-class>
</filter>

<filter-mapping> <filter-name>OAuthAuthenticationFilter</filter-name> <url-pattern>/page/*</url-pattern> </filter-mapping> <filter-mapping> <filter-name>OAuthAuthenticationFilter</filter-name> <url-pattern>/p/*</url-pattern> </filter-mapping>


And just at that point share stopped working.

It looks to me that tomcat reloaded server as soon as web.xml was changed.
And then spat following to catalina.out

Mar 03, 2014 5:04:26 AM org.apache.catalina.core.StandardContext startInternal
SEVERE: Error filterStart
Mar 03, 2014 5:04:26 AM org.apache.catalina.core.StandardContext startInternal
SEVERE: Context [/share] startup failed due to previous errors
Mar 03, 2014 5:04:26 AM org.apache.catalina.core.StandardContext reload
INFO: Reloading Context with name [/share] is completed

It is clear "filter" thing . Where should i look ? It looks like i didnt register JAR or something.
How can i get debug level up so i can see more info on problems and fix them ?

Note : I used to do java programming, but i am loosing it here on tomcat atm .

[luisrcorral]

I am experiencing a similar problem. I followed the steps in the instructions and share stopped working.

HTTP Status 503 - This application is not currently available

I wonder if in the second step “deploy library” one needs to do an additional step to load the jar. Thank you for your help!

[sowjanya26]

Hi,

I am facing an issue in dependencies and when i have added jars and followed the whole steps i am not even seeing any change in the project. Their is nothing like google login.