Skip to content

oss-tsukuba/cyrus-sasl-xoauth2-idp

 
 

Repository files navigation

cyrus-sasl-xoauth2-idp

This is a plugin of XOAUTH2 mechanism for Cyrus SASL, extending cyrus-sasl-xoauth2 to have the following features;

  • Server side

    JWT is verified by the issuer's public key using SciTokens

  • Client side

    The username is taken from the JWT's user claim instead of the input.

Required packages

RPM

  • cyrus-sasl-devel
  • scitokens-cpp-devel

Debian

  • libsasl2-dev, sasl2-bin
  • libscitokens-dev

Build and install

./autogen.sh
./configure --libdir=$(pkg-config --variable=libdir libsasl2)
make
sudo make install

Server-side configuration

sasl_plugin_dir=$(pkg-config --variable=libdir libsasl2)/sasl2

  • ${sasl_plugin_dir}/{service_name}.conf:

    mech_list: xoauth2
    xoauth2_scope: xxxx
    xoauth2_aud: xxxx
    xoauth2_user_claim: xxxx
    xoauth2_issuers: xxxx
    

Client-side configuration

  • ${sasl_plugin_dir}/{service_name}.conf:

    xoauth2_user_claim: xxxx
    

About

XOAUTH2 mechanism plugin for cyrus-sasl

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 98.1%
  • M4 1.5%
  • Other 0.4%