OAuth 与 JFrog Artifactory 的集成答案

【问题标题】：OAuth Integration with JFrog ArtifactoryOAuth 与 JFrog Artifactory 的集成
【发布时间】：2016-09-15 09:11:49
【问题描述】：

我刚刚在 AWS-Openshift 环境中使用 Docker 文件部署了 JFrog Artifactory。

我需要将 Artifactory 与 OpenShift OAuth 服务集成。

谁能指导我如何进行此操作？

我可以从下面/文档中检查这些选项。

OAuth 集成设置，在管理模块中，选择安全 | OAuth SSO。

我使用上面的配置并得到错误 -

{"error":"unsupported_grant_type","error_description":"The authorization grant type is not supported by the authorization server."}

================================================ =======================

{
  "kind": "Status",
  "apiVersion": "v1",
  "metadata": {},
  "status": "Failure",
  "message": "User \"system:anonymous\" cannot list all users in the cluster",
  "reason": "Forbidden",
  "details": {
    "kind": "users"
  },
  "code": 403
}

来自 rhel7：最新

MAINTAINER Naveen Kumar 06 <naveen.sr@tech.com>

RUN set -x \
   && yum -y install tar unzip \
    && yum -y update \
    && yum -y clean all 


#java
ENV JAVA_HOME /opt/java
ENV JAVA_VERSION_MAJOR 8
ENV JAVA_VERSION_MINOR 102
ENV JAVA_VERSION_BUILD 14

RUN mkdir -p /opt \
  && curl --fail --silent --location --retry 3 \
  --header "Cookie: oraclelicense=accept-securebackup-cookie; " \
  http://download.oracle.com/otn-pub/java/jdk/${JAVA_VERSION_MAJOR}u${JAVA_VERSION_MINOR}-b${JAVA_VERSION_BUILD}/server-jre-${JAVA_VERSION_MAJOR}u${JAVA_VERSION_MINOR}-linux-x64.tar.gz \
  | gunzip \
  | tar -x -C /opt \
  && ln -s /opt/jdk1.${JAVA_VERSION_MAJOR}.0_${JAVA_VERSION_MINOR} ${JAVA_HOME}

#jfrog-artifactory-pro-4.12.1.zip

#https://dl.bintray.com/jfrog/artifactory-pro/org/artifactory/pro/jfrog-artifactory-pro/4.12.1/jfrog-artifactory-pro-4.12.1.zip 

ENV ARTIFACTORY_VERSION 4.12.1
ENV ARTIFACTORY_HOME /artifactory-pro-${ARTIFACTORY_VERSION}

#ADD http://dl.bintray.com/content/jfrog/artifactory/jfrog-artifactory-pro-${ARTIFACTORY_VERSION}.zip?direct artifactory.zip

ADD https://dl.bintray.com/jfrog/artifactory-pro/org/artifactory/pro/jfrog-artifactory-pro/4.12.1/jfrog-artifactory-pro-4.12.1.zip artifactory.zip

RUN unzip artifactory.zip

RUN sed -i -e 's/Xmx2g/Xmx512m/g' artifactory-*/bin/artifactory.default

#artifactory-oss-4.12.1/tomcat/webapps/

RUN chmod +x /artifactory-pro-${ARTIFACTORY_VERSION}/bin/artifactory.sh

# Expose the default endpoint
EXPOSE 8081

WORKDIR /artifactory-oss-${ARTIFACTORY_VERSION}

RUN chmod -R 777 /artifactory-pro-4.12.1/

# Run the embedded tomcat container
ENTRYPOINT /artifactory-pro-${ARTIFACTORY_VERSION}/bin/artifactory.sh

问候纳文

【问题讨论】：

标签： oauth openshift token artifactory

【解决方案1】：

我们的问题是 OpenShift 身份验证不提供 id_token。这就是你的问题的原因。我们编写了一个代理来从 OpenShift OAuth 向 Artifactory 提供它所期望的答案。

请注意，Artifactory 使用 java.net.HttpURLConnection 连接到 OpenID 提供程序和 Apache HTTP 客户端。该类从系统属性中读取典型的代理设置

"https.proxyHost"
"https.proxyPort"
"https.proxyUser"
"https.proxyPassword"

要在 Artifactory 中设置它们，请编辑 /artifactory-home/bin 中的 artifactory.bat

set JAVA_OPTIONS=-server -Xms512m -Xmx2g -Xss256k -XX:+UseG1GC    -Dhttps.proxyHost=myProxyHost -Dhttps.proxyPort=myProxyPort -Dhttps.proxyUser=myProxyUser -Dhttps.proxyPassword=XXXX

【讨论】：