Whydah SSO and IAM Solution

This is the top-level repository for the Whydah components.

• For a high-level feature description, see http://getwhydah.com
• Change / Release-log https://wiki.cantara.no/display/whydah/Whydah+2.6+-+Release+Log

For status of the different modules

• https://scp.cantara.no/group/Whydah

Documentation

• Overview (Not really maintained and updated)
  • http://getwhydah.com/
• Installation, Architecture and Development
  • https://wiki.cantara.no/display/whydah/Whydah+Home
• Source Code
  • https://github.com/search?o=desc&q=Whydah&s=updated&type=Repositories&utf8=%E2%9C%93

Release log

• See https://wiki.cantara.no/display/whydah/Whydah+Releases
• Whydah 2.13 (2022-08) released

Build status

Whydah Core/Main modules

• - - https://github.com/Cantara/Whydah-SSOLoginWebApp
  
• - - https://github.com/Cantara/Whydah-SecurityTokenService
  
• - - https://github.com/Cantara/Whydah-UserAdminService
  
• - - https://github.com/Cantara/Whydah-UserIdentityBackend
  
• - - https://github.com/Cantara/Whydah-UserAdminWebApp
  

Whydah SDKs and Libraries

• - - https://github.com/Cantara/Whydah-Admin-SDK
  
• - - https://github.com/Cantara/Whydah-Java-SDK
  
• - - https://github.com/Cantara/Whydah-TypeLib
  

Whydah extensions

• - - https://github.com/Cantara/Whydah-CRMService
  
• - - https://github.com/Cantara/Whydah-StatisticsService
  
• - - https://github.com/Cantara/Whydah-OAuth2Service
  
• - - https://github.com/Cantara/Whydah-SPAProxyService
  

Whydah Example app and integration examples

• - - https://github.com/Cantara/Whydah-TestWebApp
  

Quick set-up (Using Docker on local machine)

Install docker

wget -qO- https://get.docker.com/ | sh

Start Whydah

sudo docker pull whydah/whydah-all-in-one-image
sudo docker run -it -p 80:9999 -p 9990:9990 -p 9992:9992 -p 9995:9995 -p 9996:9996 -p 9997:9997 -p 9998:9998  whydah/whydah-all-in-one-image 

Start Whydah

## Start and debug whydah
sudo docker run -it -p 80:9999 -p 9990:9990 -p 9992:9992 -p 9995:9995 -p 9996:9996 -p 9997:9997 -p 9998:9998  whydah/whydah-all-in-one-image /bin/bash
# run ./start_whydah.sh in image

Startus of local Whydah

wget -qO- http://localhost:9998/tokenservice/health
wget -qO- http://localhost:9997/sso/health
wget -qO- http://localhost:9992/useradminservice/health
wget -qO- http://localhost:9996/useradmin/health

Run whydah in early Java9?

sudo docker pull whydah/java9-whydah-all-in-one
sudo docker run -it -p 80:9999 -p 9990:9990 -p 9992:9992 -p 9995:9995 -p 9996:9996 -p 9997:9997 -p 9998:9998  whydah/java9-whydah-all-in-one 

• Go to Whydah http://localhost:9997/sso/welcome (admin/whydahadmin)

Some ready-built docker images

• Docker hub [https://registry.hub.docker.com/repos/cantara/]

Some client code examples

Example code, Whydah Java SDK with automatic session management threads

WhydahApplicationSession applicationSession = new WhydahApplicationSssion(stsURL, appCtedential);
WhydahUserSession uSession = new WhydahUserSession(applicationSession,userCredential);
if (userSession.hasRole("MyAppRole"){
  // do admin privilege operation
}

Example RAW HTTP(S) using Apache HTTP Components Fluent API and jOOX Fluent API

//  Execute a POST to authenticate my application
String applicationTokenXMlString = Request.Post("https://sso.whydah.net/sso/logon")
        .bodyForm(Form.form().add("applicationcredential", myAppCred).build())
        .execute().returnContent().asBytes();

//  authenticate with username and password (UserCredential)
String userTokenXMlString = Request.Post("https://sso.whydah.net/sso/user/"+appTokenID+"/"+"/usertoken/")
        .bodyForm(Form.form().add("apptoken", aToken)
        .add("usercredential", new UserCredential(username,password).toXML()).build())
        .execute().returnContent().asBytes();


// That's all you need to get a full user database, IAM/SSO, Facebook/OAUTH support ++
boolean hasEmployeeRoleInMyApp = $(usertoken)
        .xpath("/usertoken/application[@ID="+myApplicationId+"]/role[@name=\"Employee\"");

Infrastructure setup components

We plan to build a software-defined network application to control and handle various configuration of Whydah production setups. As they are developed they will arrive and be listed and documented here.

Whydah node configurations

To make it easy to adopt and evolve Whydah components, we'll make ready-to use Docker containers of all the Whydah modules, both as Docker images and the corresponding Dockerfile-configurations to make it easy to just grab a complete component or adjust and build your own.

Docker: UIB configurations

• OpenLdap ansible configuration
  • https://github.com/javaBin/Whydah-Provisioning/tree/master/roles/openldap
• OpenLdap dockerfile
  • https://raw.githubusercontent.com/Cantara/Whydah/master/config/Docker/uib/uib-ldap/Dockerfile
• UIB all-in-one image
  • https://registry.hub.docker.com/u/cantara/whydah-uib-all-in-one/
• UIB all-in-one dockerfile
  • https://raw.githubusercontent.com/Cantara/Whydah/master/config/Docker/uib/uib-all-in-one/Dockerfile

Docker configurations

• UAS Dockerfile
  • https://raw.githubusercontent.com/Cantara/Whydah/master/config/Docker/uas/Dockerfile
• STS Dockerfile
  • https://raw.githubusercontent.com/Cantara/Whydah/master/config/Docker/sts/Dockerfile
• SSOLWA Dockerfile
  • https://raw.githubusercontent.com/Cantara/Whydah/master/config/Docker/ssolwa/Dockerfile
• UAWA Dockerfile
  • https://raw.githubusercontent.com/Cantara/Whydah/master/config/Docker/uawa/Dockerfile

Ansible: Ansible Whydah provisioning

For those who prefer using Ansible to provision solutions, we suggest that you fork our general ansible provisioning repository on github and adjust it according to youur needs

• https://github.com/cantara/Whydah-Provisioning