Firstyear

My thinking at this point is we need to open an issue on gitlab if they support some kind of external SSH key sync process, and how that looks.

I would like to see this feature too, I think it would be appreciated. Can you open an issue on gitlab about external ssh key support?

I would just advise raising the issue on the main gitlab repo, and then someone on the project will redirect you to where it needs to be :)

> Hi @Firstyear, PR is not updated yet because I am rebasing on top of master commit by commit while addressing your comments. Ahhh okay. Sorry about that :) Want...

Yeah I don't want kani to call out to anything else like this. I'd rather have it go into the event/audit logging capability and then that can poke something else...

> One downside about webhooks that I forgot is that you might miss events when the target is unreachable in that moment. That's why part of my thinking is to...

OAuth2 has the former (verifying the access_token via introspection) as the canonical method, unless we also implemented rfc9068 which effectively turns the access_token into an OIDC style id_token. This also...

They can either be enrolled as a client themself (within the same key domain), it can be oidc (with id_tokens), or I implement #2563 in the future (which I probably...

> So if I understand correctly, when I create a oauth2 instances with `kanidm system oauth2 create ` for my Client and do the same for a resource server. The...

Yeah, I think #2563 is probably easier to implement so I should do that soon, I don't see oauth2 shared key domains for a little while.