Remove deprecated legacy naming of Azure AD (Office365) This change removes support for the legacy "office365" OAuth provider naming and configuration, which has been deprecated in 2021: I52e8834f5c in favor of the canonical "azure" provider. The OAuth plugin now only exposes the Azure AD provider under the "azure" name. Configuration using the legacy "office365" provider name is no longer recognized. For backward compatibility, linking of existing user identities is still supported: when enabled, existing Gerrit accounts that were previously created using the "office365" external ID scheme can be linked to the new "azure" external ID scheme during authentication. No new accounts are created using the deprecated scheme. Administrators of sites that previously relied on the legacy Office365 naming should have had sufficient time to migrate their configuration to the "azure" provider and, if necessary, enable identity linking to preserve existing user accounts. Change-Id: Ibf29c03f312bc2a3f978c824b8c79cbc81b84c65
With this plugin Gerrit can use OAuth2 protocol for authentication. Supported OAuth providers:
See the Wiki what it can do for you.
Prebuilt binary artifacts are available on release page. Make sure to pick the right JAR for your Gerrit version.
To build the plugin with Bazel, install Bazel and run the following:
git clone https://gerrit.googlesource.com/plugins/oauth cd oauth && bazel build oauth
Copy the bazel-bin/oauth.jar to $gerrit_site/plugins and re-run init to configure it:
java -jar gerrit.war init -d <site>
[...]
*** OAuth Authentication Provider
***
Use Bitbucket OAuth provider for Gerrit login ? [Y/n]? n
Use Google OAuth provider for Gerrit login ? [Y/n]?
Application client id : <client-id>
Application client secret :
confirm password :
Link to OpenID accounts? [true]:
Use GitHub OAuth provider for Gerrit login ? [Y/n]? n
Make sure to read the FAQ before reporting issues.
Apache License 2.0