Skip to content

Nextflow auth 2 #6462

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pditommaso merged 2 commits into from
Oct 9, 2025
Merged

Nextflow auth 2 #6462

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
fe78814
Add similar functionality for TOWER_AUTH_ID
ewels Oct 9, 2025
be58812
Add docs for TOWER_* env vars
ewels Oct 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 24 additions & 0 deletions docs/reference/env-vars.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -250,6 +250,30 @@ The following environment variables control the configuration of the Nextflow ru
: Defines the minimum size of the `.command.run` staging script for it to be written to a separate `.command.stage` file (default: `'1 MB'`).
: This setting is useful for executors that impose a size limit on job scripts.

## Seqera Platform settings

`TOWER_ACCESS_TOKEN`
: Access token for authenticating with Seqera Platform. Can also be configured via the `tower.accessToken` config option.

`TOWER_API_ENDPOINT`
: Defines the Seqera Platform API endpoint (default: `https://api.cloud.seqera.io`). Can also be configured via the `tower.endpoint` config option.

`TOWER_AUTH_DOMAIN`
: :::{versionadded} 25.10.0
:::
: Specifies the Auth0 domain to use for authentication when connecting to a custom Platform endpoint. When set, this takes precedence over the built-in mappings for known Platform endpoints.

`TOWER_AUTH_ID`
: :::{versionadded} 25.10.0
:::
: Specifies the Auth0 client ID to use for authentication when connecting to a custom Platform endpoint. Must be used in conjunction with `TOWER_AUTH_DOMAIN`.

`TOWER_REFRESH_TOKEN`
: Refresh token for maintaining authentication with Seqera Platform. Can also be configured via the `tower.refreshToken` config option.

`TOWER_WORKSPACE_ID`
: Workspace ID for the Seqera Platform workspace to use. Can also be configured via the `tower.workspaceId` config option.

## Other settings

`FTP_PROXY`
Expand Down
2 changes: 2 additions & 0 deletions modules/nextflow/src/main/groovy/nextflow/platform/PlatformHelper.groovy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,8 @@ class PlatformHelper {
*/
static String getAuthClientId(String endpoint) {
switch(endpoint) {
case SysEnv.get('TOWER_AUTH_ID'):
return SysEnv.get('TOWER_AUTH_ID')
case 'https://api.cloud.dev-seqera.io':
return 'Ep2LhYiYmuV9hhz0dH6dbXVq0S7s7SWZ'
case 'https://api.cloud.stage-seqera.io':
Expand Down
Loading