{"action":"created","issue":{"url":"https://api.github.com/repos/ga4gh/server/issues/429","labels_url":"https://api.github.com/repos/ga4gh/server/issues/429/labels{/name}","comments_url":"https://api.github.com/repos/ga4gh/server/issues/429/comments","events_url":"https://api.github.com/repos/ga4gh/server/issues/429/events","html_url":"https://github.com/ga4gh/server/issues/429","id":82332794,"number":429,"title":"OIDC support for client scripts","user":{"login":"jbu","id":31247,"avatar_url":"https://avatars.githubusercontent.com/u/31247?v=3","gravatar_id":"","url":"https://api.github.com/users/jbu","html_url":"https://github.com/jbu","followers_url":"https://api.github.com/users/jbu/followers","following_url":"https://api.github.com/users/jbu/following{/other_user}","gists_url":"https://api.github.com/users/jbu/gists{/gist_id}","starred_url":"https://api.github.com/users/jbu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbu/subscriptions","organizations_url":"https://api.github.com/users/jbu/orgs","repos_url":"https://api.github.com/users/jbu/repos","events_url":"https://api.github.com/users/jbu/events{/privacy}","received_events_url":"https://api.github.com/users/jbu/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-05-29T08:34:44Z","updated_at":"2015-06-11T14:17:24Z","closed_at":null,"body":"If we have the server protected by OIDC, then the client must understand and cope with this."},"comment":{"url":"https://api.github.com/repos/ga4gh/server/issues/comments/111151568","html_url":"https://github.com/ga4gh/server/issues/429#issuecomment-111151568","issue_url":"https://api.github.com/repos/ga4gh/server/issues/429","id":111151568,"user":{"login":"jbu","id":31247,"avatar_url":"https://avatars.githubusercontent.com/u/31247?v=3","gravatar_id":"","url":"https://api.github.com/users/jbu","html_url":"https://github.com/jbu","followers_url":"https://api.github.com/users/jbu/followers","following_url":"https://api.github.com/users/jbu/following{/other_user}","gists_url":"https://api.github.com/users/jbu/gists{/gist_id}","starred_url":"https://api.github.com/users/jbu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbu/subscriptions","organizations_url":"https://api.github.com/users/jbu/orgs","repos_url":"https://api.github.com/users/jbu/repos","events_url":"https://api.github.com/users/jbu/events{/privacy}","received_events_url":"https://api.github.com/users/jbu/received_events","type":"User","site_admin":false},"created_at":"2015-06-11T14:17:24Z","updated_at":"2015-06-11T14:17:24Z","body":"After too much experimentation we just did as you suggested. The --key argument supplies a token that is included in the Authorization header. The token is shared between the ga4gh server and the client.\r\n\r\nThe token is generated by browsing to <server>/_login which does an oidc dance with whichever provider is configured (google and the dev OP have been tested) and ends up with a token displayed in the browser window, ready to be cut/pasted into the command line."}}