Respect auth.userNameToLowerCase

The CloudFoundry UAA in general is preserving the case
of user names, if attached to another user store, e.g.
an LDAP system or database. Therefore, the plugin should
respect the auth.userNameToLowerCase configuration
parameter. If this parameter is set to true, the plugin
will return the username and externalId parameters in
OAuthUserInfo in lowercase, but it will not touch the
access tokens since the latter have a signature.
However, when comparing user names with the "user_name"
or "sub" attributes of access tokens the correct case
conversion will be applied.

Change-Id: I9198809ab3d52d9a05ad96082cf2667981042bd9
Signed-off-by: Michael Ochmann <>
3 files changed
tree: 41dc493d0742d8d82bddec417413d3b1a0608682
  1. .buckconfig
  2. .gitignore
  3. BUCK
  5. LICENSE-scribe
  8. lib/
  9. src/

Cloud Foundry UAA OAuth 2.0 Authentication Provider

With this plugin Gerrit can use OAuth2 protocol to authenticate users accessing Gerrit's Web UI with a CloudFoundry User Account and Authentication (UAA) server. The Sign In link will redirect the user to the UAA login screen.

For Git-over-HTTP communication users still need to generate and use an HTTP password.


Apache License 2.0