commit | 0cf96b75c9911038b8ad8fc9bd901bb2022dac11 | [log] [tgz] |
---|---|---|
author | Michael Ochmann <michael.ochmann@sap.com> | Mon Oct 19 16:56:45 2015 +0200 |
committer | Michael Ochmann <michael.ochmann@sap.com> | Tue Oct 20 15:16:45 2015 +0200 |
tree | 053ebeaf45ddec188c3a46bdf95a38b884208434 | |
parent | bf4142a05321352c0aa2547c5618fb45bf10f43c [diff] |
Set the auth.logouturl property during init When user signed out in the UI only the web session in Gerrit was invalidated, but not that in UAA. Consequently when the user clicked on "Sign In" again the UAA did not present the login screen but directly returned a new access token. This behavior can be prevented by configuring an explicit logout page with the auth.logouturl in the Gerrit configuration. This patch enhances the plugin's init step to configure the auth.logouturl property to point to /logout.do in UAA. This will close the UAA web session and the user can login with different credentials again. Change-Id: Id30b9d0d0836439040c05867a0d82e14333d8563 Signed-off-by: Michael Ochmann <michael.ochmann@sap.com>
With this plugin Gerrit can use OAuth2 protocol to authenticate users accessing Gerrit's Web UI with a CloudFoundry User Account and Authentication (UAA) server. The Sign In
link will redirect the user to the UAA login screen.
For Git-over-HTTP communication users still need to generate and use an HTTP password.
Apache License 2.0