For Developers
Nauthera is designed to make life easier for developers by providing a simple, declarative, and self-service workflow for managing OIDC clients.
The Traditional Workflow: A Story of Friction
In many organizations, the process of getting OIDC credentials for a new application is a slow and frustrating experience:
- File a Ticket: The developer starts by filing a ticket with the security or platform team, requesting a new OIDC client.
- Fill out a Form: The developer is then asked to fill out a lengthy form with dozens of fields, many of which they may not understand.
- Wait for Approval: The ticket goes into a queue, and the developer has to wait for a manual review and approval process.
- Receive Credentials: After a few days (or weeks), the developer receives the
client_idandclient_secret, often via an insecure channel like email or Slack. - Repeat for Changes: If the developer needs to add a redirect URI or change a scope, they have to go through the whole process again.
This workflow is a major source of friction and a significant drag on developer velocity.
The Nauthera Workflow: Declarative Self-Service
Nauthera replaces this manual, ticket-based workflow with a simple, declarative, and GitOps-native process:
Define Your Client in YAML
Create a simple AuthClient manifest in your application’s repository. You only need to define the properties that are relevant to your app.
apiVersion: auth.nauthera.io/v1alpha1
kind: AuthClient
metadata:
name: my-webapp
namespace: my-app-dev
spec:
displayName: "My Awesome Web App"
authServerRef:
name: production-server
namespace: security
redirectUris:
- "https://my-webapp.dev.example.com/callback"
scopes:
- openid
- profile
- emailCommit and Push
Commit the file to your Git repository.
git add client.yaml
git commit -m "feat: add OIDC client for my-webapp"
git pushGet Your Credentials
The Nauthera operator automatically provisions the client and creates a Kubernetes Secret with your credentials. You can then mount this secret directly into your application’s Deployment.
Key Benefits for Developers
- Velocity: Get the credentials you need in minutes, not days.
- Simplicity: No more complex UIs or confusing forms. Just simple, declarative YAML.
- Ownership: Manage your client configuration alongside your application code in the same repository.
- Instant Feedback: Get immediate feedback on the status of your client directly from the Kubernetes API.