Thanks @shraddhaag, nice work :thumbsup: I tested this and everything worked as expected. :tada: I had three comments when I reviewed:

1. Navigating to admin portal URL when unauthenticated shows Django authentication backend

In happinesspackets/messaging/views.py, some classes set the login_url as follows:

login_url = '/oidc/authenticate/'

The admin portal authentication does not happen in views.py. I assume it happens somewhere else, possibly happinesspackets/messaging/admin.py. I'm not familiar enough with Django to be certain. cc: @jonatoni @anxh3l0 @bt0dotninja

For now, if there is an easy fix to add an OIDC auth to the admin portal, that can go into this PR. Either way, we should also file a new issue to refactor authentication code into a single module to reuse across FHP.

2. Change config.yml to config.yml.example, update .gitignore

This way, we can ship an example config file without conflicting with an actual production config file. The .gitignore file should ignore the path to the config file. Even though this is minor, it makes FHP easier to deploy later.

3. Add documentation comments to config file

I suggest adding a few comment lines in the example config file to briefly explain what they mean, what data input is expected, and how they should be formatted.

Otherwise, this PR looks great. :smile:

Hi @jflory7! I have incorporated all the changes as suggested.

1. Added login to Django Admin SIte using OIDC.
2. Renamed config.yml and added changes to .gitignore.
3. Added comments to config.yml and also added documentation in docs/setup/development.rst.

The admin portal authentication does not happen in views.py. I assume it happens somewhere else, possibly happinesspackets/messaging/admin.py. I'm not familiar enough with Django to be certain. cc: @jonatoni @anxh3l0 @bt0dotninja
For now, if there is an easy fix to add an OIDC auth to the admin portal, that can go into this PR. Either way, we should also file a new issue to refactor authentication code into a single module to reuse across FHP.

I have incorporated login to Admin site using OIDC. What's remaining is prompting for credentials using OIDC auth again if a non admin logged in user tries to access the admin site. This is due to the fact that when users are logged out they are not logged out of the OpenID Connect provider. Hence when trying to login again, users are not prompted for credentials. This is detailed here and needs to be handled in a custom logout function as detailed in the link. I'll add this in the issue with refactoring authentication code.

Please let me know if I need to make anymore changes here! :)

Good idea pulling this out as a variable. :thumbsup:

I tested this and everything works as expected. Thanks @shraddhaag, nice work! Merging. :clapper: