nUser
Access to the modules are controlled nUser which hosts an oAuth provider using the IdentityServer framework.
Regular users
When an unauthorized user arrives at a secure page they are redirected to the user module to authenticate. There they will authenticate using the clients chosen method/s and then be sent page to the desired page. This is done using OpenID Connect.
The supported authentication methods for users are:
Windows ADtory (using the module nWindowsAuthIdentityServer)
OAuth 2.0.
Google federated login.
Facebook federated login.
System users
When Näktergal acts on it's own the initiating code (for example scheduled jobs) connects to the user module with one of the supported authentication methods and aquires a system user bearer token. This is then used for api calls. Note that bearer token can only be used for api calls not to access ui:s.
The supported authentication methods for system users are:
Username and password.
This uses the Resource Owner OAuth flow.