FAS Auth

gistfile1.txt

Authentication (OpenID Connect) with Ipsilon:

Authorization code flow

1. Get client ID
- Register fedora happiness packets with Ipsilon (file an infrastructure ticket)
- Register scopes: Name and email (file an infrastructure ticket)
- Dynamic client registration https://github.com/puiterwijk/oidc-register (I don't think dynamic client registration is supported right now)

2. POST to authorization endpoint (https://id.fedoraproject.org/openidc/Authorization)
- Provide Client ID, scope(name and email), redirect URL(https://fedorahappinesspackets.io/cb)

3. Grab secret code at the Redirect URL

4. Get ID and access token at token endpoint (https://id.fedoraproject.org/openidc/Token)
- Provide secret code and redirect URL 

References: 
https://connect2id.com/learn/openid-connect
https://fedoraproject.org/wiki/Infrastructure/Authentication
https://iddev.fedorainfracloud.org/