Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Datasources are tied to a specific authentication configuration #1397

Open
1 task done
nangelov-eti opened this issue Dec 18, 2024 · 0 comments
Open
1 task done

Comments

@nangelov-eti
Copy link

nangelov-eti commented Dec 18, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

There is a bug where datasources are being authenticated against a specific authentication provider configuration, instead of automatically inheriting the authentication context from the user's login session.

Expected Behavior

Datasources should automatically inherit authentication from the user's login session and should not be tied to a specific authentication configuration.

Steps to reproduce

  1. Log in as admin and create two generic OAuth providers (in our case, Keycloak), each representing a different realm.
  2. Log out and log in using one of the two generic providers.
  3. Create a datasource and set Authentication Type to OAuth2.0 (Inherit from login) and User Authentication Source to GENERIC.
    Screenshot 2024-12-18 142521
  4. Now log out and log in with the other generic provider.
  5. Observe that the datasource is linked to a specific authentication provider configuration, instead of inheriting the authentication from the login session.
    Screenshot 2024-12-18 144040
  6. If this datasource is used by an application, it triggers the following error because it is linked to the first generic OAuth provider, rather than the one we are currently authenticated with.
    Screenshot 2024-12-18 143815

Environment

Lowcoder version 2.4.10 is affected, but it's likely that the issue also impacts the latest version.
mode: ENTERPRISE

Additional Information

We use Keycloak as the OAuth provider to authenticate across multiple Keycloak realms. However, since Lowcoder doesn’t support multiple Keycloak providers, we had to configure separate generic OAuth providers, each representing a different Keycloak realm.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant