yujunjun/OpenMetadata
1
0
Fork 0
mirror of https://github.com/open-metadata/OpenMetadata.git synced 2026-01-06 12:36:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed#5364: added support for azure sso (#5365)

Browse Source
This commit is contained in:
Parth Panchal 2022-06-13 17:15:19 +05:30 committed by GitHub
parent 02fece727b
commit 515a88fe1f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 77 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
openmetadata-clients/openmetadata-java-client/pom.xml
View File

@ -64,6 +64,11 @@
<artifactId>google-auth-library-oauth2-http</artifactId>
<version>1.3.0</version>
</dependency>
<dependency>
<groupId>com.microsoft.azure</groupId>
<artifactId>msal4j</artifactId>
<version>1.12.0</version>
</dependency>
<!-- TEST -->
<dependency>
<groupId>junit</groupId>

74
openmetadata-clients/openmetadata-java-client/src/main/java/org/openmetadata/client/security/AzureAuthenticationProvider.java
View File

@ -13,26 +13,86 @@
package org.openmetadata.client.security;
import com.google.common.collect.ImmutableSet;
import com.microsoft.aad.msal4j.ClientCredentialFactory;
import com.microsoft.aad.msal4j.ClientCredentialParameters;
import com.microsoft.aad.msal4j.ConfidentialClientApplication;
import com.microsoft.aad.msal4j.IAuthenticationResult;
import com.microsoft.aad.msal4j.IClientCredential;
import feign.RequestTemplate;
import java.io.IOException;
import java.util.Set;
import org.openmetadata.catalog.security.client.AzureSSOClientConfig;
import org.openmetadata.catalog.services.connections.metadata.OpenMetadataServerConnection;
import org.openmetadata.client.security.interfaces.AuthenticationProvider;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
public class AzureAuthenticationProvider implements AuthenticationProvider {
@Override
public AuthenticationProvider create(OpenMetadataServerConnection iConfig) {
return null;
private static final Logger LOG = LoggerFactory.getLogger(AzureAuthenticationProvider.class);
private OpenMetadataServerConnection serverConfig;
private final AzureSSOClientConfig securityConfig;
private String generatedAuthToken;
private Long expirationTimeMillis;
public AzureAuthenticationProvider(OpenMetadataServerConnection iConfig) {
if (!iConfig.getAuthProvider().equals(OpenMetadataServerConnection.AuthProvider.AZURE)) {
LOG.error("Required type to invoke is Azure for AzureAuthentication Provider");
throw new RuntimeException("Required type to invoke is Azure for AzureAuthentication Provider");
}
serverConfig = iConfig;
securityConfig = (AzureSSOClientConfig) iConfig.getSecurityConfig();
if (securityConfig == null) {
LOG.error("Security Config is missing, it is required");
throw new RuntimeException("Security Config is missing, it is required");
}
generatedAuthToken = "";
}
@Override
public String authToken() {
return null;
public AuthenticationProvider create(OpenMetadataServerConnection iConfig) {
return new AzureAuthenticationProvider(iConfig);
}
@Override
public String authToken() throws IOException {
IClientCredential credential = ClientCredentialFactory.createFromSecret(securityConfig.getClientSecret());
ConfidentialClientApplication cca =
ConfidentialClientApplication.builder(securityConfig.getClientId(), credential)
.authority(securityConfig.getAuthority())
.build();
Set<String> scope = ImmutableSet.of("api://" + securityConfig.getClientId() + "/.default");
ClientCredentialParameters parameters = ClientCredentialParameters.builder(scope).build();
IAuthenticationResult result = cca.acquireToken(parameters).join();
generatedAuthToken = result.accessToken();
return generatedAuthToken;
}
@Override
public String getAccessToken() {
return null;
return generatedAuthToken;
}
@Override
public void apply(RequestTemplate requestTemplate) {}
public void apply(RequestTemplate requestTemplate) {
if (requestTemplate.url().contains("version")) {
return;
}
if (requestTemplate.headers().containsKey("Authorization")) {
return;
}
// If first time, get the token
if (expirationTimeMillis == null || System.currentTimeMillis() >= expirationTimeMillis) {
try {
this.authToken();
} catch (IOException e) {
throw new RuntimeException(e);
}
}
if (getAccessToken() != null) {
requestTemplate.header("Authorization", "Bearer " + getAccessToken());
}
}
}

2
openmetadata-clients/openmetadata-java-client/src/main/java/org/openmetadata/client/security/GoogleAuthenticationProvider.java
View File

@ -61,7 +61,7 @@ public class GoogleAuthenticationProvider implements AuthenticationProvider {
try {
String credPath = securityConfig.getSecretKey();
String targetAudience = securityConfig.getAudience();
if ((credPath != null && credPath != "") && (targetAudience != null && targetAudience != "")) {
if ((credPath != null && !credPath.equals("")) && (targetAudience != null && !targetAudience.equals(""))) {
ServiceAccountCredentials saCreds = ServiceAccountCredentials.fromStream(new FileInputStream(credPath));
saCreds =

2
openmetadata-clients/openmetadata-java-client/src/main/java/org/openmetadata/client/security/factory/AuthenticationProviderFactory.java
View File

@ -14,6 +14,7 @@
package org.openmetadata.client.security.factory;
import org.openmetadata.catalog.services.connections.metadata.OpenMetadataServerConnection;
import org.openmetadata.client.security.AzureAuthenticationProvider;
import org.openmetadata.client.security.GoogleAuthenticationProvider;
import org.openmetadata.client.security.NoOpAuthenticationProvider;
import org.openmetadata.client.security.OktaAuthenticationProvider;
@ -31,6 +32,7 @@ public class AuthenticationProviderFactory {
case AUTH_0:
case CUSTOM_OIDC:
case AZURE:
return new AzureAuthenticationProvider(serverConfig);
case OPENMETADATA:
return null;
}

3
openmetadata-clients/openmetadata-java-client/src/main/java/org/openmetadata/client/security/interfaces/AuthenticationProvider.java
View File

@ -14,12 +14,13 @@
package org.openmetadata.client.security.interfaces;
import feign.RequestInterceptor;
import java.io.IOException;
import org.openmetadata.catalog.services.connections.metadata.OpenMetadataServerConnection;
public interface AuthenticationProvider extends RequestInterceptor {
AuthenticationProvider create(OpenMetadataServerConnection iConfig);
String authToken();
String authToken() throws IOException;
String getAccessToken();
}