Superset CustomAuthUserView

[JishnuJsm]

Hello Superset Community,

I need to implement a custom authentication flow in Superset where two methods can be used for login:

SSO using Token: If a valid token is provided in the URL (e.g., ?token=1234abcd456), the user should be authenticated via SSO.
Standard Username/Password Authentication: If no token is provided, the user should be prompted to log in using the usual username and password.
What is the best way to implement this logic in Superset?

I’ve tried modifying the CustomSecurityManager but am unsure how to properly switch between the two methods dynamically based on the presence of a token.

Could someone provide guidance or an example on how to achieve this?

[dosubot[bot]]

I found some similar discussions that might be relevant to your query:

1. Login to ui with access_token - This discussion is open and might provide insights into handling login with tokens.
2. Multiplr login configurations - This is another open discussion that could offer useful information on configuring multiple login methods.
3. login with link superset - This discussion is also open and may contain relevant information about login processes using links.

To implement a custom authentication flow in Superset where you can switch between SSO using a token and standard username/password authentication, you can extend the CustomSecurityManager. You would need to override the authentication logic to check for the presence of a token in the URL and decide the authentication method accordingly.

Unfortunately, I couldn't find a specific example in the repository for dynamically choosing between SSO and username/password authentication based on URL parameters. However, you can start by checking for the token in the URL within the CustomSecurityManager and then proceed with the appropriate authentication method. You might need to use the url_param method to access URL parameters and implement the logic to handle the token-based SSO or fallback to the standard authentication if no token is present.

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Other}