My alpha installation is secured by google IAP (oauth provider) It works fine, i.e. only logged user with token can access to alpha endpoints. How can I provide JWT token for connection from ratel?

Sorry, I dont really understand. Open resty for what? My problem is that I don’t know how to make ratel to use jwt token, or how to make it to redirect browser for authentication.

[image] korjavin2: make it to redirect browser for authentication openresty can do it.

Okay, where i should place openresty in my schema?

In my application, openresty is similar to nginx. I use it to protect all my api and static resources (using lua-resty-openidc).

Okay, good But my api (alpha) already secured with oauth2. My problem now how to make ratel to connect to it.

I use ratel to connect to the alpha connection after the openresty reverse proxy, and the authentication tasks are all handled by openresty.

So, for ratel it’s already authentificated, right? Do you store your permanent token in open resty, or how it’s done?

[image] korjavin2: So, for ratel it’s already authentificated, right? Yes. [image] korjavin2: Do you store your permanent token in open resty, or how it’s done? I haven’t stored the token, lua-resty-openidc will help me manage the sessions.

Sorry, I still don’t understand. Could you please share configuration?

Using ratel with secured backend (google oauth)

Users Dgraph

MichelDiz (Michel Diz) September 10, 2021, 1:35pm 20

Yes.

Not sure, you have to generate them using a internal tool. So I don’t think it is easy to revoke. Cuz you need to restart the cluster I think.

Topic		Replies	Views
Securing Ratel Server Connection Ratel	16	1695	September 5, 2020
Ratel unable to connect dgraph server ACL user password error Ratel	13	3221	April 25, 2020
Add Poor-man’s auth to Ratel UI Ratel status:accepted , kind:feature , ratel	1	923	February 26, 2021
How to use Ratel with Docker in version 21.03.1 Ratel	3	2664	September 19, 2021
User authentication Dgraph kind:question	21	5168	October 16, 2020

Using ratel with secured backend (google oauth)

Related topics