Commit Graph

222 Commits (main)

Author SHA1 Message Date
Artem Zatsarynnyi 5041b59e6e Merge branch 'master' into spi 2017-10-12 11:54:46 +03:00
Sergii Kabashniuk 1bea871d0a Fixed possible constraint violation with an existed organization. (#6674)
* Fixed possible constraint violation with an existed organization.

Usecase is following:
If we have already an organization with name, let's say "org"  and the new user also has name "org" then we will have constraint violation.
 In this case, we will try to create the user with name "org"+random string.
2017-10-11 16:21:59 +03:00
Sergii Kabashniuk ee01b2998f Multi-user Eclipse Che (#6441)
Multi-user Eclipse Che (#6441)
#### How to run it.
```docker run -it -e CHE_MULTIUSER=true -e CHE_HOST=<your ip> -e CHE_KEYCLOAK_AUTH-SERVER-URL=http://<your ip>:5050/auth -v /var/run/docker.sock:/var/run/docker.sock -v ~/.che-multiuser:/data eclipse/che:nightly start --skip:pull --skip:nightly```
#### How to manage it
 - Keycloak configured with two realms. ```Master``` and ```che```. Also we have one user admin/admin in both realm. Admin user in master realm is  - super admin. 
-  Eclipse Che configured for che realm
- We enabled user registration in ```Che``` realm
#### Known limitation
 - swagger would not work. We need to upgrade a version. to support openid authentification https://github.com/eclipse/che/issues/6015
- It's working on local docker. We are going to provide scalable version based on OpenShift on next versions.
- Invitation of non-existent users to Eclipse Che organization https://github.com/eclipse/che/issues/6335
#### How to run it when it is in a branch


To run an multiuser Che version, the following steps are required after building the branch:
 - Rebuild init, cli and che images (in the given sequence). To do that, proceed to folder _dockerfiles/<image_name>_ and run _build.sh_
 - Run Che in a  usual way using cli, with additional parameters:  `-e CHE_MULTIUSER=true` and `--skip:pull --skip:nightly`  
   Full command example:
   `docker run -it --rm -v /var/run/docker.sock:/var/run/docker.sock -v /home/user/.che:/data -e CHE_MULTIUSER=true eclipse/che-cli:nightly start --skip:pull --skip:nightly`
 - MacOS users may need to edit _che.env_ file in the data folder, changing `CHE_HOST` and `CHE_KEYCLOAK_AUTH__SERVER__URL` values to their specific IP.
 
When start is succeeded, the following docker containers should be created:  
 - che, exposing 8080 port;
 - che_keycloak, exposing 5050 port;  
 - che_postgres, exposing 5432 port;
2017-10-06 17:27:27 +03:00
Artem Zatsarynnyi 4bc18519db Merge branch 'che-multiuser' into spi 2017-10-05 16:30:22 +03:00
Sergii Leshchenko 7924910ee0 CHE-6565 Add ability to configure `allowedClockSkewSeconds` for JWT parser (#6568) 2017-10-04 13:49:46 +03:00
Anton Korneta 32c02883b6 Remove '/ws' and '/websocket' parts from KeycloakAuthenticationFilter binding 2017-10-03 14:42:27 +03:00
Artem Zatsarynnyi 8de6dbe5fb Merge branch 'che-multiuser' into spi 2017-10-03 13:04:39 +03:00
Oleksandr Garagatyi 49f80dad17 CHE-5893: Map system state API to login filter
It is needed since it is secured by permissions system which requires
an authenticated user.
Also, use base API endpoint for checking Che in OpenShift deploy
script since system state API which was used before is secured now.
Signed-off-by: Oleksandr Garagatyi <ogaragat@redhat.com>
2017-10-03 09:45:58 +03:00
Anna Shumilova f1e09ced81 Fix activity checker fails
Signed-off-by: Anna Shumilova <ashumilo@redhat.com>
2017-10-02 15:26:38 +03:00
Artem Zatsarynnyi 81bce959ce Merge branch 'che-multiuser' into spi 2017-10-02 14:59:55 +03:00
Sergii Kabashniuk 2df0a54923 Fixing wrong code formatting 2017-10-02 14:04:04 +03:00
Anton Korneta 09f062370c Fix selenium-tests.sh add keycloak token endpoint to settings 2017-10-02 11:14:45 +03:00
Anton Korneta 9559f7ce7e Adapt selenium tests to che multiuser 2017-09-29 18:03:08 +03:00
Sergii Leshchenko 146636b03e Clean KeycloakConfigurationService up 2017-09-29 12:11:55 +03:00
Sergii Leshchenko d490e7c19f Parse object with GSON instead of jackson 2017-09-29 12:11:55 +03:00
Sergii Leshchenko 198522cd2d Remove dependency on keycloak-core artifact 2017-09-29 12:11:55 +03:00
Sergii Leshchenko 861f4eccbb CHE-6463 Remove machine auth code that is outdated in spi 2017-09-28 13:06:50 +03:00
Sergii Kabashniuk de52d5f04b Code cleanup 2017-09-27 11:29:54 +03:00
Oleksii Kurinnyi bd2ea09b1a CHE-5802: transplantation of Codenvy dashboard stuff to Che dashboard (#6381)
* code clean-up

Signed-off-by: Oleksii Kurinnyi <okurinny@redhat.com>

* move user-management and its related components

Signed-off-by: Oleksii Kurinnyi <okurinnyi@codenvy.com>

* move organizations and its related components

Signed-off-by: Oleksii Kurinnyi <okurinnyi@codenvy.com>

* add Keycloak authorization

Signed-off-by: Oleksii Kurinnyi <okurinnyi@codenvy.com>

* move teams and its related components

Signed-off-by: Oleksii Kurinnyi <okurinnyi@codenvy.com>

* move share-workspace and its related components

Signed-off-by: Oleksii Kurinnyi <okurinnyi@codenvy.com>

* update assembly

* fixup! update assembly
2017-09-22 10:03:17 +03:00
Sergii Kabashniuk 546ba4e4ea Merge with master 2017-09-20 11:34:18 +03:00
Sergii Kabashniuk d4f03cbc4a Ability to authenticate Oauth flow (#6326)
* Add keycloak token to oauth authenticate call

* fixup! Add keycloak token to oauth authenticate call

* fixup! Add keycloak token to oauth authenticate call

* Fix dashboard build

* fixup! Add keycloak token to oauth authenticate call

* fixup! Add keycloak token to oauth authenticate call

* Add security token for websocket url  (#6319)

* Add security token for websocket url

Signed-off-by: Vitalii Parfonov <vparfonov@redhat.com>

* Fix failed test (#6325)

Signed-off-by: Vitalii Parfonov <vparfonov@redhat.com>
2017-09-18 18:42:49 +03:00
Max Shaposhnik d2bfa4f7f4 Move permissions and authorization into separate module; 2017-09-14 17:03:43 +03:00