Customized login in an internal network

[shrektan]

Hi,

I’m trying to deploy an shinyproxy in my company’s network. However, the login strategy is not one of the existing ones.

Our strategy is similiar to using Github account to login. Specifically, our IT builds a public login page (for example, 10.0.0.66/login?the-login-info) any internal app is required to redirect the client to that page. If the login successes, the login page (i.e., 10.0.0.66/login?the-login-info) will redirect the user to the apps with corresponding info.

When I use shinyserver, I will implement the login logic in R codes per app. However, since shinyproxy provides an unified login strategy, I would love to take advantage of that. Sadly, I’m not a java expert. So it’s difficult for me to start. The logic of our internal login model is quite simple, so I believe I may be able to make it work by myself or find some…

Could you please give me some hints about how to implement this in java by modifying your source code… Like what kind of library I may use or where to start…

Thanks.

[fmichielssen]

Hi @shrektan,

As you may know, ShinyProxy uses Spring Security for its different authentication approaches. One of those is the ‘social authentication’, which includes Github, and is based on OAuth2.

Some possible routes to take:

• If your login process is compatible with OpenID (which is also based on OAuth), you can use a tutorial like this one: http://www.baeldung.com/spring-security-openid-connect
• If not, you can implement your own approach as a new IAuthenticationType, see https://github.com/openanalytics/shinyproxy/tree/master/src/main/java/eu/openanalytics/auth
  This would not be trivial, however. I think you’d need at least a HTTP filter to redirect the user to the login page. And when the user returns after login, you need some way to establish that the login was really successful… I’m not sure how you are handling this in your other applications.

[shrektan]

Thanks.
I will take a look and come back if any progress.