Re: Oauth support

On Tue, Nov 29, 2022 at 10:32:28PM +0100, Nagy Gabor wrote:
> > On Tue, Nov 29, 2022 at 11:50:16AM +0100, Nagy Gabor wrote:
> > >   
> > > > I also have a script (currently not in the roundup repo) for
> > > > requesting the initial tokens from a MS cloud.  
> > > 
> > > I think it would be also helpful, if this script were available.
> > > Thanks for your work.  
> > 
> > I've pushed the script. Be sure to call it with --help first to get an
> > explanation. It's located in the top-level scripts directory.
> > 
> > Ralf
> 
> Thanks.

Ah, the script currently uses a https localhost url (which must be
registered in the cloud). For the certificate+key is uses the (debian
specific) snakeoil cert in /etc/ssl/private and /etc/ssl/cert. The
private directory is only accessible to group 'ssl-cert', so the user
calling that script must either have this group or some other
permissions to make this work. So a good idea would be to add options to
override the default cert and key.

And it seems for localhost urls http is allowed (all other urls require
https), so the code should decide to use ssl only when the redirect URL
is https (and have an option to override this if you're using a
complicated setup with proxying).

Ralf
-- 
Dr. Ralf Schlatterbeck                  Tel:   +43/2243/26465-16
Open Source Consulting                  www:   www.runtux.com
Reichergasse 131, A-3411 Weidling       email: [email protected]