Open
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
There is a bug where datasources are being authenticated against a specific authentication provider configuration, instead of automatically inheriting the authentication context from the user's login session.
Expected Behavior
Datasources should automatically inherit authentication from the user's login session and should not be tied to a specific authentication configuration.
Steps to reproduce
- Log in as admin and create two generic OAuth providers (in our case, Keycloak), each representing a different realm.
- Log out and log in using one of the two generic providers.
- Create a datasource and set Authentication Type to
OAuth2.0 (Inherit from login)
and User Authentication Source toGENERIC
.
- Now log out and log in with the other generic provider.
- Observe that the datasource is linked to a specific authentication provider configuration, instead of inheriting the authentication from the login session.
- If this datasource is used by an application, it triggers the following error because it is linked to the first generic OAuth provider, rather than the one we are currently authenticated with.
Environment
Lowcoder version 2.4.10 is affected, but it's likely that the issue also impacts the latest version.
mode: ENTERPRISE
Additional Information
We use Keycloak as the OAuth provider to authenticate across multiple Keycloak realms. However, since Lowcoder doesn’t support multiple Keycloak providers, we had to configure separate generic OAuth providers, each representing a different Keycloak realm.
Metadata
Metadata
Assignees
Type
Projects
Status
🆕 New