Skip to content

feat: allow any authentication provider + fief OIDC#999

Merged
inimaz merged 7 commits into
masterfrom
feat/auth-providers
Jan 11, 2026
Merged

feat: allow any authentication provider + fief OIDC#999
inimaz merged 7 commits into
masterfrom
feat/auth-providers

Conversation

@inimaz

@inimaz inimaz commented Dec 7, 2025

Copy link
Copy Markdown
Collaborator

Description

Instead of using directly Fief, we can pass an auth_provider interface that uses OIDC and points to Fief.

Two main gains:

  1. Like this migrating to other auth providers will be easier. If they use OIDC, update the env vars. If they do not use OIDC they will need to implement the auth_provider interface.
  2. We can use this interface as well to provide a no-authentication provider 😄 . See
    carbonserver/carbonserver/api/services/auth_providers/no_auth_provider.py, for testing purposes. This will allow the UI in local to be easier to test/develop.

Related to #861

@inimaz inimaz requested a review from prmths128 December 7, 2025 13:12
@prmths128

Copy link
Copy Markdown
Contributor

do we need multiple auth providers ?
the short term issue is not the fief server but the reliance on custom libs instead of generic oidc
i'd suggest instead keeping the fief server for the moment but switching the fief libs to fastapi_oidc on the back and next-auth on the front might
and then using another oidc server

@inimaz

inimaz commented Dec 10, 2025

Copy link
Copy Markdown
Collaborator Author

do we need multiple auth providers ?

Thanks for the comment @prmths128 ! I agree we won't need 2 auth providers ever at the same time. On the other hand if we can implement the fastapi_oidc so that the server is injected and easily plugable? Like that for local dev we inject a mock and it is easier to work with it. What do you think?

@inimaz inimaz marked this pull request as ready for review January 10, 2026 17:00
@inimaz inimaz requested a review from a team as a code owner January 10, 2026 17:00
@inimaz inimaz changed the title feat: allow any authentication provider feat: allow any authentication provider + fief OIDC Jan 10, 2026

@SaboniAmine SaboniAmine left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

Comment thread carbonserver/carbonserver/config.py
@inimaz inimaz merged commit 93dd3cf into master Jan 11, 2026
11 checks passed
@inimaz inimaz deleted the feat/auth-providers branch January 11, 2026 09:38
@benoit-cty benoit-cty mentioned this pull request Jan 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants