How to test MinIO SSO - cniackz/public GitHub Wiki

Main trick:

  • Use: MINIO_IDENTITY_OPENID_REDIRECT_URI=http://localhost:9001/oauth_callback to redirect to 9001 and test the console that comes with MinIO; otherwise it will get redirected to 5005 for some reason I haven't explore and I can't understand but that is useful for testing at least.

Objective

To test SSO in MinIO without using separate console or port 5005

Pre-step:

  1. Have auth0 account for this, either the one from Lenin or the one you created on your own on fri dec 30 2022

Steps:

  1. Run below lines in terminal:
export MINIO_IDENTITY_OPENID_REDIRECT_URI=http://localhost:9001/oauth_callback
export MINIO_ROOT_USER=minio
export MINIO_ROOT_PASSWORD=minio123
export MINIO_IDENTITY_OPENID_CONFIG_URL=https://dev-xqm5ioqlmy7qyjvl.us.auth0.com/.well-known/openid-configuration
export MINIO_IDENTITY_OPENID_CLIENT_ID="I2lu1TWOvRP42PxZo3KaHYnJBmvLAjK2"
export MINIO_IDENTITY_OPENID_CLIENT_SECRET="eohRqOhfhKXYZtJe5JKWdcwGtw7n5NlTYAYjH9a3-4s4YgJMU5Z5QL4Y4MWRMa1k"
export MINIO_IDENTITY_OPENID_SCOPES="openid,profile,email"
export MINIO_IDENTITY_OPENID_CLAIM_NAME="https://min.io/policy"
export MINIO_BROWSER_REDIRECT_URL=http://localhost:9001
export MINIO_SERVER_URL=http://localhost:9000
minio server ~/Data --console-address ":9001"

  1. Open web page: http://localhost:9001 in a Browser in incognito mode

  2. Click login

  1. Login with your Google credentials
  1. Then you should see it, the trick was MINIO_IDENTITY_OPENID_REDIRECT_URI=http://localhost:9001/oauth_callback