openvsx icon indicating copy to clipboard operation
openvsx copied to clipboard

Is it possible to disable OAuth2 feature from server

Open coldtomatojuice opened this issue 3 years ago • 4 comments

Thanks for your remarkable works. It's a great solution for the one who wants to use VScode repository privately in a private network I am the one who would like to do that either

So I wonder if there is a way to run the server without using OAuth2 feature. Can it be possible to publish and install module without authorization? If yes, How?

Thank you

coldtomatojuice avatar Jan 04 '21 23:01 coldtomatojuice

Currently OAuth2 is the only way to authenticate users, but we are open to add more ways. How would you like to manage users?

spoenemann avatar Jan 05 '21 07:01 spoenemann

Hi @spoenemann I noticed there was an initialize sql script for superuser and gaint the admin role to him in another script. so since there are superuser exits, how could we use it to login?

zlweicoder avatar Apr 07 '22 18:04 zlweicoder

Moin, @spoenemann! So glad I found this project! We too are on a private network; as I'm trying find a way to offer this as a solution in an environment that is essentially airgapped, I wouldn't be able to use github as an oauth provider away. We do have LDAP, however, but for testing It'd be fantastic if we could just do basic auth using the database and add users manually in the application config.

I assume the user management portion is mainly for publishing, right? The only publishing we'd likely ever do would be though a cicd pipeline anyway, and so we could get by with limited users.

prophet60091 avatar Apr 25 '22 14:04 prophet60091

I agree it would be great to add more authentication methods and make that configurable via Spring properties. That shouldn't be too hard since we're based on Spring Boot. But I won't have time to work on this, so contributions are welcome.

spoenemann avatar Apr 26 '22 08:04 spoenemann