FAQ

Q. What is the difference between authentication type OAUTH and OpenID?

A. When you start from scratch then you probably want OAUTH. When you've used non-SSO OpenID and need Google OAuth provider support after OpenID service shutdown, then you need Hybrid OpenID+OAuth authentication method. This is supported with auth.type = 'OpenID'.

Q. Why I am getting identity is untrusted error with Hybrid OpenID+OAuth method?

A. You need to set trustedOpenID:

  [auth]
    type = OPENID
    trustedOpenID=^.*$

Q. How to configure the proxy with this plugin?

A. Check this Proxy support request.

Q. Why Gerrit doesn't start after setting the auth.type = OAUTH?

A. You havn't installed the plugin or havn't configured any of the providers. Also verify that you have replaced the plugin name in the documentation:

[plugin "@PLUGIN@-google-oauth"]
    client-id = "<client-id>"
    client-secret = "<client-secret>"
    link-to-existing-openid-accounts = true

The correct plugin name + suffix, e.g.:

  [plugin "gerrit-oauth-provider-google-oauth"]
  [...]

Q. Why does the Gerrit page hang while trying to "Sign In"?

A. Slow RNG, on provider side. See https://github.com/davido/gerrit-oauth-provider/issues/40 for more detail how to increasy the entropy.