webhook: Add OpenID based authentication
The OpenID feature is implemented with the requests-oauthlib and pyjwt python modules.
The default behaviour is still to use gitlab authentication but openid can be used by adding the needed information in the configuration yaml file:
auth-method: openid
openid:
well_known_url: "https://gitlab.apertis.org/.well-known/openid-configuration"
client_id: "${GITLAB_APP_CLIENT_ID}"
client_secret: "${GITLAB_APP_CLIENT_SECRET}"
A Gitlab Application must be configured on Gitlab, with the openid
scope and with the callback URL set to https://qa.apertis.org/openid_callback
Marked as draft because this needs to be merged after !160 (merged)
Edited by Detlev Casanova