OpenID Connect parent repository for local development
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
Jan Dittberner 0d0c05c233 Update to latest cacert_resources 1 year ago
cacert_resources@d39547c40b Update to latest cacert_resources 1 year ago
deployment Finish IDP setup 2 years ago
hydra_config@4d3f908958 Reference new hydra_config commit 2 years ago
oidc_app@f980c1acc3 Update submodule versions 2 years ago
oidc_idp@9fad7ef3a6 Update oidc_idp reference commit 1 year ago
oidc_registration@be9006546d Add Makefile based build process 2 years ago
.gitignore Add local preconditions and Vagrantfile 2 years ago
.gitmodules Switch submodule URLs to code.cacert.org 2 years ago
Makefile Add Makefile based build process 2 years ago
README.md Remove double "setup" 2 years ago
Vagrantfile Add local preconditions and Vagrantfile 2 years ago

README.md

CAcert OpenID connect parent project

This repository references several repositories for the CAcert OpenID connect setup.

Clone the repository

git clone --recurse-submodules https://code.cacert.org/cacert/oidc-parent.git
cd oidc-parent
# cause pull, fetch and other git commands to consider submodules
git config submodule.recurse true

Get started

  • setup Hydra
  • build CAcert web application resources
  • setup IDP (provides login and consent screens)
  • setup demo application
  • setup OpenID Connect client registration application

Local development setup

Make sure you have the necessary prerequisites installed (tested on Debian 11 Bullseye) and ~/.local/bin is in your $PATH variable:

sudo apt update
sudo apt install make python3-pip python3-psycopg2 golang-go yarnpkg
python3 -m pip install --user -U pip
python3 -m pip install --user ansible
export PATH=$HOME/.local/bin:$PATH

Note: It is a good idea to put the PATH export line into your .bashrc or .zshenv.

Use make to build the web app resources and applications:

go install github.com/nicksnyder/go-i18n/v2/goi18n@latest
make

Use ansible-playbook to deploy Hydra, IDP, Client registration and the demo application:

cd deployment
ansible-playbook 01_install_cacert_oidc.yml

Vagrant setup

sudo apt install vagrant-libvirt virt-manager libvirt-clients
vagrant up
vagrant ssh -- cat .local/share/mkcert/rootCA.pem | sudo tee /usr/local/share/ca-certificates/mkcert-vagrant-oidc.crt
sudo update ca-certificates