mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-05-17 14:33:55 +02:00
Code Issues Actions10 Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse source 
Co-authored-by: James Hodgkinson <james@terminaloutcomes.com>
This commit is contained in:
Fabian Kammel 2025-04-18 16:13:39 +02:00 committed by GitHub
parent 1e1ed6caba
commit 95ff67ddb4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 6 additions and 6 deletions

12
book/src/integrations/oauth2/examples.md
View file

@ -618,10 +618,10 @@ client_secret = "<SECRET>"
## OPKSSH ## OPKSSH
[OPKSSH](https://github.com/openpubkey/opkssh) is a tool of the [OPKSSH](https://github.com/openpubkey/opkssh) is a tool of the
[OpenPubkey](https://github.com/openpubkey/openpubkey) project. It enables ssh [OpenPubkey](https://github.com/openpubkey/openpubkey) project. It enables SSH
to be used with OpenID Connect allowing SSH access to be managed via identities to be used with OpenID Connect allowing access to be managed via identities
like alice@example.com instead of long-lived SSH keys. It does not replace SSH, like `alice@example.com` instead of long-lived private keys. It does not replace SSH,
but instead generates SSH keys on the fly, and augments the verification process but instead generates private keys on the fly, and augments the verification process
on the server side. on the server side.
To set up OPKSSH to authenticate with Kanidm: To set up OPKSSH to authenticate with Kanidm:
@ -645,7 +645,7 @@ To set up OPKSSH to authenticate with Kanidm:
the redirect URL, and scope access to the `opkssh_users` group: the redirect URL, and scope access to the `opkssh_users` group:
```sh ```sh
# The last argument, the origin parameter, is required, but a dead link. # The redirect origin is set to localhost for local callbacks
kanidm system oauth2 create-public opkssh opkssh http://localhost:3000 kanidm system oauth2 create-public opkssh opkssh http://localhost:3000
# Add the specific redirect URIs used by OPKSSH # Add the specific redirect URIs used by OPKSSH
@ -677,7 +677,7 @@ To set up OPKSSH to authenticate with Kanidm:
sudo install opkssh-linux-amd64 /usr/local/bin/opkssh sudo install opkssh-linux-amd64 /usr/local/bin/opkssh
rm opkssh-linux-amd64 rm opkssh-linux-amd64
# This will open a browser with consent screen # This will open a browser to login via Kanidm
opkssh login --provider=https://idm.example.com/oauth2/openid/opkssh,opkssh opkssh login --provider=https://idm.example.com/oauth2/openid/opkssh,opkssh
``` ```