Versions Compared

Old Version 1

changes.mady.by.user Georg Johansen

Saved on

compared with

New Version Current

changes.mady.by.user Lise Kristoffersen

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.



Column
width62%

Requirements

This integration guide is created using Ubuntu Linux and Apache2. For other Linux distros adjust the instructions accordingly.
Buypass Code OpenID Connect provides authentication through mobile phone numbers. The published web application must perform the authorization of its users.
The users mobile number will be passed to the application by http header.

Prerequisites

Integration

Install Connect module

Run commands:

  • sudo apt-get update
  • sudo apt-get install libapache2-mod-auth-openidc


OpenID Connect configuration

Edit auth_openidc.conf with the OIDC configuration parameters. The file location in Ubuntu is mods_available/. For Red Hat the location is conf.d/

OIDCRedirectURI https://testoidc.bpcodedemo.no/secure/redirect_uri

OIDCCryptoPassPhrase secretpassphrase12345

OIDCProviderMetadataURL https://auth.code.buypass.no/auth/realms/bpcode/.well-known/openid-configuration

OIDCClientID apache-demo

OIDCClientSecret clientsecret12345

OIDCScope "openid email profile"

OIDCRemoteUserClaim preferred_username


Enable the OpenID Connect module with the following command

sudo a2enmod auth_openidc


Enable OpenID Connect authentication for the website to be secured. This is typically done in the sites-enabled folder.

<Directory "/var/www/html">

AuthType openid-connect

Require valid-user

</Directory>


Enable passing of the user identity through http-header with the following command

sudo a2enmod headers


Verification

To verify the successful passing of the user identity in the http header, it is possible to create a sample PHP file, e.g. index.php.

<html>
<body>
<h1>Hello, <?php echo($_SERVER['REMOTE_USER']) ?></h1>
<pre><?php print_r(array_map("htmlentities", apache_request_headers())); ?></pre>
<a href="/protected/redirect_uri?logout=https%3A%2F%2Flocalhost%2Floggedout.html">Logout</a>
</body>
</html>

Remember to install PHP in Apache for successful verification.

sudo apt-get install php libapache2-mod-php



Column
width2%


Column
width26%


Div
classright-navigation

Innhold  

Page Tree
root@parent
startDepth2
Include Page
INCLIB:_right_navigation_styleINCLIB:_right_navigation_style




Column
width10%


Section


INCLIB:_bottom_bar 

Column
width62%

Include Page
INCLIB:_bottom_bar


Column
width2%


Column
width26%
 


Column
width10%
Include PageINCLIB:_navigation_buttons_styleINCLIB:_navigation_buttons_style Include PageINCLIB:doc_center_styleINCLIB:doc_center_style  Include PageINCLIB:_template_styleINCLIB:_template_style