Drupal.org blog: Single Sign-On is coming to Drupal.org thanks to Cloud-IAM

Planet Drupal - 12. Februar 2024 - 17:46

The Drupal Association is pleased to announce that we have partnered with Cloud-IAM to deploy secure, GDPR-compliant managed KeyCloak for single sign-on for Drupal.org. 

Using single sign-on for Drupal.org identity management has been a long term goal of the Drupal Association, as it offers a number of benefits: 

  • We can more easily manage authentication across our upgraded Drupal 10 sites, and our legacy Drupal 7 sites while we migrate all of our Drupal.org properties.

  • We can begin to introduce 'social login' allowing new users to create their Drupal.org accounts using external identities they already have - making it easier to jump straight in to contribution, as one example. 

  • Once we establish the appropriate terms of service, we can begin to allow Drupal.org users to use their identity to login to external community sites, such as Drupal Camp websites, and use that to federate data back to Drupal.org. 

We know we wanted to implement KeyCloak as our identity and access management solution under the hood, because it is Open Source, robust, and well supported. 

We reached out to Cloud-IAM because they built their company around providing managed services to support KeyCloak as an open source solution to identity management with a strong SLA, and no vendor lock-in. Wherever possible the Drupal Association looks to work with companies that share our Open Source ethos, and are excited to support the Drupal community. 

Being based in Europe, Cloud-IAM is also a privacy-centric service provider, with robust compliance processes for GDPR that also meet or exceed international standards for other privacy regulations such as CCPA, LGPD, etc. 

To our immense gratitude, Cloud-IAM was not only willing to support us, but excited to partner with us to support the Drupal Community and Drupal project. Based on our experience, we would certainly recommend them to all the Drupal agencies and site owners who are looking for their own solutions for managed IAM based on an open source platform.

In fact - CloudIAM would like to offer the site owners and agencies who are looking for their own identity and access management service 10% off, with promo code: DRUPAL10. You can sign up to try the service for free and then apply the discount to a subscription plan of your choice.

So What's Next?

The Drupal Association has partnered with Tag1Consulting to help us build a migration process for Drupal.org users. In the coming month or so we'll be scheduling the migration of our user database. On the Drupal side, we'll be using the OpenID Connect contrib module. 

The majority of your user profile on Drupal.org will stay the same, you will now just see a Cloud-IAM login/registration flow, and use the Cloud-IAM UI for editing some of the core fields for your user account, like name and email address. The rest remains on your Drupal profile. 

When the migration window is scheduled we'll share in the #drupal_infrastructure channel on Drupal Slack, and repost to our usual drupal_infra social media channels.

Kyle Einecker|True Summit: Search Web Components Alpha 2 Release

Planet Drupal - 12. Februar 2024 - 17:21
A few weeks ago, I announced the Search Web Components module, and since then, I've seen a lot of interest and gotten some great feedback on the module's state and where it could go from here. I've also been doing a lot of work to improve the site builder experience and stabilize config structures and patterns to help avoid breaking changes moving forward. Here's a look at the improvements included in the Alpha 2 release

The Drop Times: Life as a Drupal Storyteller: A Journalist's Perspective

Planet Drupal - 12. Februar 2024 - 16:19
Curious about life as a journalist for Drupal? Step into the world where every day brings new stories, connections, and insights. From interviews with community members to crafting engaging articles, it's a dynamic journey of discovery and collaboration.

Hey there, Drupal Fam!

Wanted to drop you a line and share a bit about what it's like to be a journalist here in the heart of Drupal. It's not all flashy headlines and breaking news, but it's rewarding in its special way.

So, picture this: every day, I'm diving deep into the world of Drupal, connecting with community members, and getting the scoop on all the latest happenings. Whether it's chatting with developers, designers, or contributors, there's never a dull moment.

One of the valuable aspects of my role is connecting with Drupal community members for interviews. These engagements offer valuable insights and perspectives, enriching our understanding of the community and its contributions.

And let's not overlook the articles. We have some fantastic content lined up for you. From insightful analyses to thought-provoking pieces and event coverage, we consistently bring fresh and engaging material.

But here's the thing – it's not just about churning content. It's about doing justice to Drupal and all the incredible work being done by our community members. Their contributions make a difference, and I'm honoured to play a small part in showcasing their talents.

So, next time you're scrolling through our articles or tuning in to one of our interviews, remember – thanks to the Drupal community's amazing folks who make it all possible.

An organizational update: We are now active on Drupal Slack as #thedroptimes. Do search for the handle and join Slack, where you can participate in the process of news gathering by occasionally answering our queries or sharing your perspectives. 

Now, let's talk about some important news stories we covered from last week:

Automated Testing Kit for Drupal, led by André Angelantoni, revolutionizes end-to-end testing with its versatile features, impactful vision, and seamless integration of Cypress.io and Playwright frameworks. Andre is the project lead of the Automated Testing Kit, Layout Builder Kit, and Campaign Kit. He speaks with Alka Elizabeth in an email correspondence about the project.  

Nicolas Loye, CTO of Smile, a French Drupal agency, and the treasurer of Drupal France, shares insights with Elma John in an interview on community-driven growth, financial stewardship, and fostering collaboration. From porting projects to organizing Drupal events, Nicolas reflects on the essence of community work and its impact on his role as a technology leader.

Jorge Lopez-Lago, a seasoned Solutions Architect at FFW, shares his diverse experiences and insights in another exclusive interview with Elma. Jorge offers a glimpse into his evolution from a hands-on Drupal developer to a multifaceted leader and discusses his unique approach to problem-solving and community engagement.

Get the latest update from FOSDEM as Drupal, Joomla, Typo3, and WordPress join forces to establish the Open Website Alliance, representing over 50% of websites online.

The Drop Times is thrilled to announce its official media partnerships with DrupalCamp Rennes and Drupal Developer Days Burgas 2024! Stay tuned for exclusive coverage of these premier Drupal events, featuring insights, interviews, and live updates.

Discover the latest in Drupal and web technologies with Dries Buytaert, founder of Drupal, as he visits Japan for the first time in nearly eight years. This exclusive event on March 14, 2024, in Tokyo, promises valuable insights into the future of web development.

Get ready to save $100 on DrupalCon Portland tickets! Early bird registration is now open. Join the City of Roses for networking, collaboration, and learning with the Drupal community. Register now! Drupal Association introduces scholarships for historically oppressed communities and community grants to support vital Drupal contributors at the upcoming DrupalCon Portland 2024. Eligible individuals can seize this opportunity to engage in the conference and contribute to the Drupal community.

Dive into the heart of Drupal MountainCamp as a volunteer! Join in welcoming attendees, ensuring smooth sessions, and making this event unforgettable. Your contributions will be rewarded with drupal.org credits. Drupal Mountain Camp announces Acquia as its latest Gold Sponsor, adding substantial value to the upcoming event.

DrupalCamp Ghent 2024 invites professionals and experts to submit session proposals for its upcoming event, offering a platform to share insights with the Drupal, PHP, and JavaScript communities.

Beginning July 1, 2024, Drupal.org will discontinue patch testing and DrupalCI testing, mandating a shift to GitLab CI for automated testing. Contributors must switch from patches to merge requests by the specified date, marking a significant transition in the platform's testing framework.

We acknowledge that there are more stories to share. However, due to constraints in selection, we must pause further exploration for now.

To get timely updates, follow us on LinkedIn, Twitter and Facebook. Also, join us on Drupal Slack at #thedroptimes

Thank you,

Sincerely
Kazima Abbas
Sub-editor, TheDropTimes.

Gábor Hojtsy: Onwards to Drupal 11 - ways to get involved

Planet Drupal - 12. Februar 2024 - 13:52
Onwards to Drupal 11 - ways to get involved

Last November the Drupal project announced that Drupal 10 will receive long term support until mid-late 2026. That is when Drupal 12 will be released, so this long term support does not mean that Drupal 11 will not be released as well in the meantime. And by meantime, I mean Drupal 11 will be released this year, in 2024, in June or July or December.

Gábor Hojtsy Mon, 02/12/2024 - 13:52

mcdruid.co.uk: What is overriding your Drupal config?

Planet Drupal - 12. Februar 2024 - 13:32

Something is overriding config in Drupal - you can see it by invoking drush with and without the flag to include overrides:

$ drush cget system.performance | grep -B1 preprocess css: preprocess: false -- js: preprocess: false $ drush cget --include-overridden system.performance | grep -B1 preprocess css: preprocess: true -- js: preprocess: true

Perhaps we want to turn this config off, but these overrides won't let us.

Where are these config overrides coming from?

Generally, overrides can come from two places - for example, see:

https://git.drupalcode.org/project/drupal/-/blob/10.2.3/core/lib/Drupal/Core/Config/Config.php#L280

// Apply overrides. if (isset($this->moduleOverrides) && is_array($this->moduleOverrides)) { $original_data = NestedArray::mergeDeepArray([$original_data, $this->moduleOverrides], TRUE); } if (isset($this->settingsOverrides) && is_array($this->settingsOverrides)) { $original_data = NestedArray::mergeDeepArray([$original_data, $this->settingsOverrides], TRUE); }

There could be an override in settings(.php) or perhaps it's coming from a module. How can we tell which?

The settingsOverrides and moduleOverrides properties of the config object are protected, but in modern PHP there's at least one trick we can use to have quick look at them.

$ drush ev "var_dump((fn() => \$this->moduleOverrides)->call(\Drupal::config('system.performance')))" NULL $ drush ev "var_dump((fn() => \$this->settingsOverrides)->call(\Drupal::config('system.performance')))" array(2) { ["css"]=> array(1) { ["preprocess"]=> bool(true) } ["js"]=> array(1) { ["preprocess"]=> bool(true) } }

So we can tell that these overrides are coming from settings as opposed to modules.

Hopefully that'll help us track them down.

Tags: drupal-planetdrupaldebugging

LN Webworks: How To Manage Custom Drupal Migrations Using SQLBase?

Planet Drupal - 12. Februar 2024 - 13:05

Drupal 9 stopped getting updates on November 1, 2023. Drupal 7 will stop getting updates by January 2025, but that's the last extension. Drupal 10 came out in December 2022, and the latest version, 10.1.6, was released on November 1, 2023. What does this mean? 

There’s a lot going right now in the drupal space and many websites are migrating to updated versions of Drupal. In fact, as of now, over 12,000 websites have already switched to Drupal 10, as per the Upgrade Status module download stats. This simply means that now is the best time for you to opt for a Drupal migration company and make the move. Let's have a look at the various ways to migrate in Drupal, with a special focus on custom migrations using the SqlBase source plugin.

Gábor Hojtsy: Looking for your input for DrupalCon Portland 2024 initiative highlights

Planet Drupal - 12. Februar 2024 - 11:50
Looking for your input for DrupalCon Portland 2024 initiative highlights

I have the pleasure to organize the DrupalCon initiative keynotes now twice a year. The genius idea of this I believe came from Angie Byron, and ever since we include them, they are among the top rated sessions at each DrupalCon. The goals of this keynote are manyfold. First, we want to show the people who lead important work in core, humanising the software.

Gábor Hojtsy Mon, 02/12/2024 - 11:50

The Drop Times: Nicolas Loye: Bridging Technology and Community for Sustainable Growth

Planet Drupal - 9. Februar 2024 - 22:59
Uncover the journey of Nicolas Loye, CTO at Smile and a Drupal luminary, as he shares insights on community building, leadership, and staying at the forefront of technology. Discover the blend of technical expertise and community stewardship that defines his impactful role in the Drupal ecosystem.

Apple Vision Pro im Test: Erste Reaktion im Video

heise online Newsticker - 8. Februar 2024 - 20:50

Acht Heise-Kollegen haben sich zum ersten Mal das Apple Vision Pro Headset aufgesetzt und berichten im Video von ihrem ersten Eindruck.

KI-Update kompakt: Google Gemini, Microsoft Copilot, AI-Act, KI lernt im Schlaf

heise online Newsticker - 8. Februar 2024 - 20:29

Das "KI-Update" liefert werktäglich eine Zusammenfassung der wichtigsten KI-Entwicklungen.

Hive: 10 Millionen US-Dollar Belohnung für Hinweise zur Ransomware-Gruppe

heise online Newsticker - 8. Februar 2024 - 20:22

Vor mehr als einem Jahr wurde die Infrastruktur der Hive-Ransomware übernommen. Die Suche nach den Hinterleuten kommt aber offenbar nicht voran.

CEO-Wechsel bei Mozilla: Mitchell Baker gibt Posten auf

heise online Newsticker - 8. Februar 2024 - 19:18

Mitchell Baker gibt ihren CEO-Posten bei Mozilla ab und will sich künftig vor allem um die Repräsentation der Non-Profit-Organisation hinter Firefox kümmern.

Baden-Württemberg: Lörrach und Konstanz gestehen Datenpannen ein

heise online Newsticker - 8. Februar 2024 - 19:14

Zwei Kommunen im Süden Baden-Württembergs haben nicht unerhebliche Datenpannen eingestanden. In einem Fall wurde das Ausmaß erst durch Recherchen publik.

ARM gewährt erstmals Einblick in seine Geschäftszahlen

heise online Newsticker - 8. Februar 2024 - 18:54

Dank des Börsengangs gibt es den ersten detaillierten Geschäftsbericht in ARMs Firmengeschichte. Er offenbart, wie viel Geld welche Chips bringen.

EHDS: Dringender Appell für Widerspruchsrecht bei der E-Patientenakte​

heise online Newsticker - 8. Februar 2024 - 18:41

Bürgerrechtsorganisationen fordern ein Recht der Bürger, der primären und vor allem sekundären Verwendung medizinischer Daten zu widersprechen.​

Gesund.bund.de: Streit um Gesundheitsportal des Bundes geht weiter

heise online Newsticker - 8. Februar 2024 - 18:06

Das OLG Köln hebt das Urteil des Landgerichts Bonn zum Informationsportal des Gesundheitsministeriums auf und verweist die Klage an das Verwaltungsgericht Köln.

Ungültige Buttons: Verbraucherzentrale erringt Teilerfolg gegen Metas Abo-Modell

heise online Newsticker - 8. Februar 2024 - 17:35

Seit einigen Wochen kann man in Europa für werbefreie Versionen von Facebook und Instagram bezahlen. Die Umsetzung verstößt aber gegen deutsches Recht.

heise+ | Lüfterloses PC-Netzteil mit GaN-Technik im Test

heise online Newsticker - 8. Februar 2024 - 17:30

Das geräuschlose PC-Netzteil Hdplex 250W GaN ATX mit Galliumnitrid-Technik soll besonders effizient arbeiten. Doch es hakt an mehreren Stellen.

WhatsApp öffnet sich für Dritt-Apps: Details bekanntgegeben

heise online Newsticker - 8. Februar 2024 - 17:17

Der Messenger-Dienst WhatsApp öffnet sich auf Druck der EU für andere Anbieter. Jetzt wurde bekannt gegeben, worauf sich Nutzer einstellen können.

Kernfusion: JET stellt neuen Energierekord auf

heise online Newsticker - 8. Februar 2024 - 17:09

Mit 0,2 Milligramm Brennstoff wurden am Forschungsreaktor JET in 5,2 Sekunden 69 Megajoule Fusionsenergie freigesetzt. Allerdings ist die Energiebilanz negativ.