Bump scribejava to 8.3.3 and jackson to 2.21.1 Update ScribeJava and Jackson Databind to newer versions. With ScribeJava 8.x, Java 8 specific functionality has been moved to a separate 'scribejava-java8' module. Since this is now a transitive dependency of scribejava-apis, we update the dependency lockfile and include it in our third-party runtime JARs allowlist to ensure it is correctly bundled into the plugin artifact. The Jackson bump ensures compatibility with the newer ScribeJava release and addresses potential security vulnerabilities in the older 2.10.x line. Change-Id: I27a4a1946b3f3e0eecf6dfd045d854cdd80dcb76
With this plugin Gerrit can use OAuth2 protocol for authentication. Supported OAuth providers:
See the Wiki what it can do for you.
Prebuilt binary artifacts are available on release page. Make sure to pick the right JAR for your Gerrit version.
To build the plugin with Bazel, install Bazel and run the following:
git clone https://gerrit.googlesource.com/plugins/oauth cd oauth && bazel build oauth
Copy the bazel-bin/oauth.jar to $gerrit_site/plugins and re-run init to configure it:
java -jar gerrit.war init -d <site>
[...]
*** OAuth Authentication Provider
***
Use Bitbucket OAuth provider for Gerrit login ? [Y/n]? n
Use Google OAuth provider for Gerrit login ? [Y/n]?
Application client id : <client-id>
Application client secret :
confirm password :
Link to OpenID accounts? [true]:
Use GitHub OAuth provider for Gerrit login ? [Y/n]? n
Make sure to read the FAQ before reporting issues.
Apache License 2.0