Evalai: OAuth integration

[WinnersGoHome]

Has there been any more consideration to add OAuth support. I saw issue #766 where the OAuth integration was tabled until a future release. Now we're 2 years in the future and it would be nice to know if this can be reopened.

[rohitjha941]

@RishabhJain2018 I would like to work on integration. Can I work on this

[RishabhJain2018]

Hi @rohitjha941, sure you can work on this.

[rohitjha941]

Hi, Currently I am starting with Github. What all services do you want me to use?

[shawnahall71]

Hi - I work with @WinnersGoHome. We're working to deploy this in an enterprise environment - ideally we would be able to authenticate against Azure Active Directory, which supports OpenID connect and OAuth 2.0 among other mechanisms. At a minimum (if that's too complex to code), we need to integrate into our Active Directory environment using LDAP.

[WinnersGoHome]

I noticed that you already include the django-allauth module. Azure AD uses the Microsoft provider in django-allauth.

[rohitjha941]

Should I Shart with Azure Active Directory? Also, I have worked a little on Github Integration. I will be creating a PR for GitHub by Tomorrow Night.

[WinnersGoHome]

That would be great!

[rohitjha941]

I will be a bit late, I am busy completing formalities in my college

[rohitjha941]

Hi, I am really sorry for the delay. I have completed GitHub integration.

Pull Request: #2353

[thoth291]

I wonder how much it will take to make it working for general purpose OAuth or, for example, integration with GitLab.

[rohitjha941]

@thoth291 It will not take much time to integrate Gitlab. Just in case, Are you talking about self-hosted gitlab instance?

@RishabhJain2018 Can you please let me know what all services we are gonna use?

[thoth291]

@rohitjha941 - yeah, I'm talking about self-hosted GitLab - that might make it easy-path for future integration with "kernels" hosted through in-house GitLab and other type of reproducibility...
Pure OAuth or OpenID is probably the way to move it forward - but I'm not familiar with auth protocols enough to judge what will be easier: create integration with GitLab or general purpose OAuth/OpenID...

[rohitjha941]

@thoth291 Ok will work on gitlab integration.

[shawnahall71]

@thoth291 - my understanding is that OpenID is an authentication provider, whereas OAuth2 is an authorization provider. To confuse things, OpenID Connect provides OpenID authentication on top of OAuth2 for authorization. https://spin.atomicobject.com/2016/05/30/openid-oauth-saml/

@rohitjha941 to be clear, what do you mean by Gitlab integration? Does that mean using self-hosted Gitlab as a OAuth2 or OpenID Connect provider (https://docs.gitlab.com/ee/topics/authentication/)? If EvalAI uses a standard protocol like OAuth2 or OpenID Connect under the covers, then I'd say the work you're doing isn't specific to Gitlab, but could be used for any standards compliant provider such as Azure Active Directory, Github, Gitlab, etc.

[rohitjha941]

@shawnahall71 Yup my work is not specific to GitLab. I have already worked on GitHub using Django AllAuth.I would do the same for Gitlab. Also, any service provider mentioned here can be integrated easily.

[shawnahall71]

Hi @rohitjha941 - we have a new team member who is ready to try integrating EvalAI with Azure Active Directory, so I wanted to check in and see how the work was coming.

Also, I looked through the service provider list you posted above for django-allauth, and while there are a ton of providers I don't see Azure Active Directory (just Microsoft Graph). However, I do see what appears to be code to handle AAD in the django-allauth repo here: https://github.com/pennersr/django-allauth/blob/master/allauth/socialaccount/providers/azure/provider.py. Do you know if django-allauth has AAD support, and maybe it's just not in the documentation yet?

[rohitjha941]

@shawnahall71 I have gone through documentation Azure Active Directory. Are you using OAuth/OpenID or SSO? Django All Auth does not have support for AAD (SSO SAML etc). But OAuth can be implemented using Microsoft as a Provider

[shawnahall71]

To make sure we're on the same page, this is the list of Azure Active Directory SSO methods available that I've been referring to: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on. I haven't done an integration with our AAD before so I'm not 100% sure, but I believe we have the option of using either OpenID Connect / OAuth as well as SAML.

[rohitjha941]

@shawnahall71 We can use OpenID Connect / OAuth

[thoth291]

@rohitjha941, Have this been pushed to the master? Can I use OpenID/OAuth now? If yes - then where I should put my settings for AppID, ClientID and server_url?

[thoth291]

@rohitjha941, I'm still trying to figure out where should I specify my auth information in the setup in order to connect it to something like Azure Active Directory. I can't find any examples in django framework and almost lost my hope to try use your product in more or less realistic scale... Could you please advise?

[anshalshukla]

@RishabhJain2018 is this issue still available, I think a part of this has already been done by @rohitjha941 so if you can let me know integration with what all services are required I can do.
@thoth291 Are you still working on this?

[thoth291]

Unfortunately, @anshalshukla, I can't do much more than just wait for someone to guide me on this. My team is looking forward to use EvalAI - but auth is showstopper at this point.

[RishabhJain2018]

My team is looking forward to use EvalAI - but auth is showstopper at this point.

Hi @thoth291, Thank you for bringing this up. I lead this project and it isn't on the roadmap for the next few months but in case we have a use case here, I'd be happy to prioritize it and get it implemented in the platform.

Moreover, I'd be happy to discuss with you the challenge you're trying to host and what all feature requirements you have. We can connect on [email protected] and schedule a short call to discuss all of this. Let me know your thoughts on it.