Configure OAuth from a provider not listed

Site Operators Site Operations Help
1

Our observatory runs a site with Django OAuth Toolkit installed. I’m trying to configure Openedx (sumac) to use the observatory OAuth provider for login. After setting up a client on our observatory site, I tried setting this up in the OpenEdx django admin under:

Home › Third-party authentication › Provider Configuration (OAuth)

  • Check ‘enable’
  • Check ‘visible’
  • Select google-oauth2 (even though we are using a non-Google provider because there is no option for generic)
  • Enter client secret
  • Enter client ID

I tried going to the link suggested in the docs:
http://local.openedx.io:8000/auth/complete/google-oauth2/

but I get a Django error page saying “Can’t fetch setting of a disabled backend/provider.”

Anyone have experience setting up OAuth2 authentication with a third-party (but not a social) provider?

2

You need to mark true for ENABLE_THIRD_PARTY_AUTH

https://edx.readthedocs.io/projects/edx-installing-configuring-and-running/en/latest/configuration/tpa/tpa_integrate_open/tpa_oauth.html#additional-oauth2-providers-advanced

3

Thanks @douglasbbs. I’ve put this code into a plugin

from tutor import hooks

from social_core.backends.oauth import BaseOAuth2

class OCSOAuth2(BaseOAuth2):
    """LCO OCS OAuth authentication backend"""
    name = 'lco-ocs-auth2'
    AUTHORIZATION_URL = 'https://observe.lco.global/o/authorize/'
    ACCESS_TOKEN_URL = 'https://observe.lco.global/api/api-token-auth/'
    ACCESS_TOKEN_METHOD = 'POST'
    SCOPE_SEPARATOR = ','


########################################
# PATCH LOADING
########################################

hooks.Filters.ENV_PATCHES.add_items(
    [
# Stop email activation because emails are not working
       ( 
           "openedx-common-settings",
        "FEATURES['ENABLE_THIRD_PARTY_AUTH'] = True"
       ),
       (
           "openedx-lms-common-settings:",
           """
FEATURES['THIRD_PARTY_AUTH_BACKENDS'] = 'social_core.backends.oauth.OCSOAuth2',
FEATURES['ENABLE_REQUIRE_THIRD_PARTY_AUTH'] = True
           """
       )
    ]
)

This clearly doesn’t work. I don’t know what I should put into the the 'THIRD_PARTY_AUTH_BACKENDS' setting so it references the override in this plugin.

The OpenEdx docs are not helpful because they refer to the pre-Tutor way of doing things (which seems to be be consistently the case).