RE: Re: Repo access with HTTPS and an access token (or: GCM for svn?)

2024-03-29 Thread Thomas Ã…kesson
Hi Evan and Daniel, We are running with mod_openidc in production since late 2022. This includes some elaborate apache configs to allow both browsers and Subversion clients to access the same URLs protected by AuthType openid-connect (session cookie). This works in combination with an installed

Re: Repo access with HTTPS and an access token (or: GCM for svn?)

2024-03-29 Thread EML
Wow - interesting. I don't know anything about TortoiseSVN, but presumably it will 'just work' if svn itself can be fixed up. Daniel - if you move everything to dev, I'll follow there. Thoughts about TA's post: 1. Why "tunnel the session token in basic auth"? Does he want HTTP basic auth /a

Re: Repo access with HTTPS and an access token (or: GCM for svn?)

2024-03-29 Thread Daniel Sahlberg
Den fre 29 mars 2024 kl 16:27 skrev EML : > Before I do too much work on this, I'd like to do a sanity check. Does > anyone know of a client which will access a repo over HTTPS, with an > access/bearer token? This gives SSO and multi-factor authentication using > OAuth2. > > The repo runs behind A

Repo access with HTTPS and an access token (or: GCM for svn?)

2024-03-29 Thread EML
Before I do too much work on this, I'd like to do a sanity check. Does anyone know of a client which will access a repo over HTTPS, with an access/bearer token? This gives SSO and multi-factor authentication using OAuth2. The repo runs behind Apache httpd, which is using mod_auth_openidc. The