プロジェクト

全般

プロフィール

Vote #81597

完了

Drop OpenID support

Admin Redmine さんが3年以上前に追加. 3年以上前に更新.

ステータス:
Closed
優先度:
通常
担当者:
-
カテゴリ:
OpenID_49
対象バージョン:
開始日:
2022/05/09
期日:
進捗率:

0%

予定工数:
category_id:
49
version_id:
155
issue_org_id:
35755
author_id:
332
assigned_to_id:
332
comments:
10
status_id:
5
tracker_id:
2
plus1:
0
affected_version:
closed_on:
affected_version_id:
ステータス-->[Closed]

説明

Redmine currently supports OpenID authentication.

However, OpenId was obsoleted by OpenID Connect some years ago and most OpenID providers discontinued their services. Now it is very difficult to find a web service with an OpenID provider service. This means that it is difficult for Redmine users to start using OpenID login. And it is not easy for us to test if Redmine's OpenID support is working properly.

Given this situation, probably very few users are using OpenID login in Redmine. I think it is time to remove OpenID support from Redmine.


journals

Go MAEDA wrote:
> However, OpenId was obsoleted by OpenID Connect some years ago [...]

I hadn't noticed that change.

Go MAEDA wrote:
> [...] And it is not easy for us to test if Redmine's OpenID support is working properly.

Well, AFAIK it isn't working OOTB properly at least. And that already for 10(+) years. See #3780, #5966, #11778 and the '"OpenID Fix":http://projects.andriylesyuk.com/project/redmine/openid-fix' plugin by Andriy Lesyuk.

Go MAEDA wrote:
> [...] I think it is time to remove OpenID support from Redmine.

I agree. +1. And I think that JPL would wholeheartedly agree too (given the thoughts he expressed at the time in #699#note-14)...
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
Here is a patch to drop OpenID.
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
Let's drop this.
--------------------------------------------------------------------------------
Committed the changes. Redmine no longer supports OpenID.
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
> Given this situation, probably very few users are using OpenID login in Redmine. I think it is time to remove OpenID support from Redmine.

If you don't know, then maybe you should ask your users before you do such a change. We just set up a Keycloak for our services and so we wanted to use this. Are you planning to replace it with an alternative? OAuth2?

> OpenId was obsoleted by OpenID Connect some years ago and most OpenID providers discontinued their services.

How can a native function get obselete if the alternative is a 3rd party plugin? Should that be a feature or an improvement? That's a huge step backwards.

Also, looking at the pages for issues and pull requests from that OpenID Connect plugin, it looks pretty much unmaintained. So again, how can this be a proper alternative?

https://github.com/devopskube/redmine_openid_connect

> Now it is very difficult to find a web service with an OpenID provider service. This means that it is difficult for Redmine users to start using OpenID login.

What? First, there are not only hosted solutions out there. You can set up your own service, see Keycloak or SimpleID. So I don't see how this could be an argument why it should be difficult to start using it. It depends on who you ask. It's very common for companies or organizations to use some sort of SSO or OpenID login, as you maybe know.

> And it is not easy for us to test if Redmine's OpenID support is working properly.

As I just mentioned, you can set up your own service. So I don't get why it's not "easy" for you to test if it's working properly. There are definitely possibilities.

Please consider reverting this change or providing an alternative, e.g. login with OAuth2.
--------------------------------------------------------------------------------
Your decision to drop support for OpenID is unbelievable!
I agree with Felix Singer.
--------------------------------------------------------------------------------


related_issues

relates,Closed,35688,OpenIdAuthentication alias_method_chain
relates,Closed,32293,Redmine does not start if optional openid gems are not installed
relates,Closed,699,OpenID login
relates,Closed,36326,Missing div tag in views page

Admin Redmine さんが3年以上前に更新

  • カテゴリOpenID_49 にセット
  • 対象バージョン5.0.0_155 にセット

他の形式にエクスポート: Atom PDF

いいね!0
いいね!0