Activate identity provider automatically when passing --oauth2

[tasso94]

Acceptance Criteria (Required on creation)

Activate identity provider automatically when passing --oauth2.

Hints

Make configuring camunda.bpm.oauth2.identity-provider.enabled: true for Camunda Run obsolete when passing the --oauth2 flag.

Links

Breakdown

Pull Requests

Beta Give feedback

1. feat(oauth2): enable identity provider by default #4643
   +0
   

[danielkelemen]

Possible Solutions

1. Pass the configuration in the startup script.
   java.jar ... --camunda.bpm.oauth2.identity-provider.enabled=true
   • Pros: Easy
   • Cons: After testing it, it looks like yaml cannot override this anymore. Customers could only change it by manually changing the start.sh script.
2. Have a Run configuration that always registers the provider.
   • In Spring Boot we could check if provider is already registered, so it's not registered twice.
   • Pros: ?
   • Cons: Not easily overridable either.
3. Register the Identity Provider by default.
   • Change default to true: identity-provider.enabled=true
   • OAuth2 is likely used with groups, too so it makes sense.
   • Pros: Easiest
   • Cons: Nothing, users can still disable it if they wish.

Decision: 3