Class: Legate::Auth::Coordinators::OIDCCoordinator

Inherits:

OAuth2Coordinator

• Object
• Legate::Auth::Coordinator
• OAuth2Coordinator
• Legate::Auth::Coordinators::OIDCCoordinator

Defined in:

lib/legate/auth/coordinators/oidc_coordinator.rb

Overview

OIDCCoordinator handles the interactive OpenID Connect authentication flow using fibers. It extends the OAuth2Coordinator with OIDC-specific functionality.

Constant Summary

Constants inherited from Legate::Auth::Coordinator

Legate::Auth::Coordinator::DEFAULT_TIMEOUT

Instance Attribute Summary

Attributes inherited from Legate::Auth::Coordinator

#error, #result, #status

Instance Method Summary

• #initialize(scheme:, credential:, session_service:, token_store: nil, timeout: DEFAULT_TIMEOUT, redirect_uri: nil) ⇒ OIDCCoordinator constructor

  Initialize a new OIDC coordinator.

Methods inherited from Legate::Auth::Coordinator

#cancel, #complete?, #resume, #start, #success?

Constructor Details

#initialize(scheme:, credential:, session_service:, token_store: nil, timeout: DEFAULT_TIMEOUT, redirect_uri: nil) ⇒ OIDCCoordinator

Initialize a new OIDC coordinator

Parameters:

• scheme (Legate::Auth::Schemes::OpenIDConnect) —

  The OIDC scheme

• credential (Legate::Auth::Credential) —

  The credential with client information

• session_service (Legate::SessionService::Base) —

  The session service

• token_store (Legate::Auth::TokenStore, nil) (defaults to: nil) —

  Optional token store

• timeout (Integer, nil) (defaults to: DEFAULT_TIMEOUT) —

  Optional timeout in seconds

• redirect_uri (String, nil) (defaults to: nil) —

  Optional redirect URI

Raises:

• (ArgumentError)

# File 'lib/legate/auth/coordinators/oidc_coordinator.rb', line 20

def initialize(scheme:, credential:, session_service:, token_store: nil, timeout: DEFAULT_TIMEOUT, redirect_uri: nil)
  super

  raise ArgumentError, "Expected an OIDC scheme, got #{scheme.class}" unless scheme.is_a?(Legate::Auth::Schemes::OIDC)

  return if credential.auth_type == :oidc
  # Allow OAuth2 credentials as they are compatible
  return if credential.auth_type == :oauth2

  raise ArgumentError, "Credential must have auth_type :oidc or :oauth2, got #{credential.auth_type}"
end