From 7d070a339cab73c4940007aaaffc0a8a3a7d0b9a Mon Sep 17 00:00:00 2001
From: gkolokythas <gkolokythas@cite.gr>
Date: Wed, 23 Oct 2019 13:38:27 +0300
Subject: [PATCH] Implements OpenAIRE login provider. (Issue #200)

---
 .../main/java/eu/eudat/controllers/Login.java |  13 +++-
 .../OpenAIRE/OpenAIRECustomProvider.java      |  10 +++
 .../OpenAIRE/OpenAIRECustomProviderImpl.java  |  63 ++++++++++++++++++
 .../OpenAIRE/OpenAIREUser.java                |  37 ++++++++++
 .../validators/TokenValidatorFactoryImpl.java |  13 +++-
 .../openaire/OpenAIRETokenValidator.java      |  52 +++++++++++++++
 .../openaire/helpers/OpenAIRERequest.java     |  12 ++++
 .../helpers/OpenAIREResponseToken.java        |  20 ++++++
 .../resources/application-devel.properties    |   7 ++
 .../application-production.properties         |   7 ++
 .../resources/application-staging.properties  |   7 ++
 .../src/app/core/common/enum/auth-provider.ts |   3 +-
 .../src/app/ui/auth/login/img/openaire.png    | Bin 0 -> 11910 bytes
 .../app/ui/auth/login/img/openaire_small.png  | Bin 0 -> 2883 bytes
 .../app/ui/auth/login/login.component.html    |   4 ++
 .../app/ui/auth/login/login.component.scss    |  15 +++++
 .../src/app/ui/auth/login/login.component.ts  |   9 +++
 .../src/app/ui/auth/login/login.module.ts     |   4 +-
 .../src/app/ui/auth/login/login.routing.ts    |   4 +-
 .../openaire-login.component.html             |   0
 .../openaire-login.component.ts               |  61 +++++++++++++++++
 dmp-frontend/src/environments/environment.ts  |   8 ++-
 22 files changed, 341 insertions(+), 8 deletions(-)
 create mode 100644 dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProvider.java
 create mode 100644 dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProviderImpl.java
 create mode 100644 dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIREUser.java
 create mode 100644 dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/OpenAIRETokenValidator.java
 create mode 100644 dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIRERequest.java
 create mode 100644 dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIREResponseToken.java
 create mode 100644 dmp-frontend/src/app/ui/auth/login/img/openaire.png
 create mode 100644 dmp-frontend/src/app/ui/auth/login/img/openaire_small.png
 create mode 100644 dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.html
 create mode 100644 dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.ts

diff --git a/dmp-backend/web/src/main/java/eu/eudat/controllers/Login.java b/dmp-backend/web/src/main/java/eu/eudat/controllers/Login.java
index 15acf15ae..53950a5a2 100644
--- a/dmp-backend/web/src/main/java/eu/eudat/controllers/Login.java
+++ b/dmp-backend/web/src/main/java/eu/eudat/controllers/Login.java
@@ -10,6 +10,9 @@ import eu.eudat.logic.security.validators.b2access.helpers.B2AccessResponseToken
 import eu.eudat.logic.security.validators.linkedin.LinkedInTokenValidator;
 import eu.eudat.logic.security.validators.linkedin.helpers.LinkedInRequest;
 import eu.eudat.logic.security.validators.linkedin.helpers.LinkedInResponseToken;
+import eu.eudat.logic.security.validators.openaire.OpenAIRETokenValidator;
+import eu.eudat.logic.security.validators.openaire.helpers.OpenAIRERequest;
+import eu.eudat.logic.security.validators.openaire.helpers.OpenAIREResponseToken;
 import eu.eudat.logic.security.validators.orcid.ORCIDTokenValidator;
 import eu.eudat.logic.security.validators.orcid.helpers.ORCIDRequest;
 import eu.eudat.logic.security.validators.orcid.helpers.ORCIDResponseToken;
@@ -41,6 +44,7 @@ public class Login {
     private B2AccessTokenValidator b2AccessTokenValidator;
     private ORCIDTokenValidator orcidTokenValidator;
     private LinkedInTokenValidator linkedInTokenValidator;
+    private OpenAIRETokenValidator openAIRETokenValidator;
 
     private Logger logger;
 
@@ -48,13 +52,14 @@ public class Login {
     @Autowired
     public Login(CustomAuthenticationProvider customAuthenticationProvider, AuthenticationService nonVerifiedUserAuthenticationService,
                  TwitterTokenValidator twitterTokenValidator, LinkedInTokenValidator linkedInTokenValidator, B2AccessTokenValidator b2AccessTokenValidator,
-                 ORCIDTokenValidator orcidTokenValidator, UserManager userManager, Logger logger) {
+                 ORCIDTokenValidator orcidTokenValidator, OpenAIRETokenValidator openAIRETokenValidator, UserManager userManager, Logger logger) {
         this.customAuthenticationProvider = customAuthenticationProvider;
         this.nonVerifiedUserAuthenticationService = nonVerifiedUserAuthenticationService;
         this.twitterTokenValidator = twitterTokenValidator;
         this.linkedInTokenValidator = linkedInTokenValidator;
         this.b2AccessTokenValidator = b2AccessTokenValidator;
         this.orcidTokenValidator = orcidTokenValidator;
+        this.openAIRETokenValidator = openAIRETokenValidator;
         this.logger = logger;
         this.userManager = userManager;
     }
@@ -99,6 +104,12 @@ public class Login {
         return ResponseEntity.status(HttpStatus.OK).body(new ResponseItem<ORCIDResponseToken>().payload(this.orcidTokenValidator.getAccessToken(orcidRequest)).status(ApiMessageCode.NO_MESSAGE));
     }
 
+    @RequestMapping(method = RequestMethod.POST, value = {"/openAireRequestToken"}, produces = "application/json", consumes = "application/json")
+    public @ResponseBody
+    ResponseEntity<ResponseItem<OpenAIREResponseToken>> openAIRERequestToken(@RequestBody OpenAIRERequest openAIRERequest) {
+        return ResponseEntity.status(HttpStatus.OK).body(new ResponseItem<OpenAIREResponseToken>().payload(this.openAIRETokenValidator.getAccessToken(openAIRERequest)).status(ApiMessageCode.NO_MESSAGE));
+    }
+
     @RequestMapping(method = RequestMethod.POST, value = {"/me"}, consumes = "application/json", produces = "application/json")
     public @ResponseBody
     ResponseEntity<ResponseItem<Principal>> authMe(Principal principal) throws NullEmailException {
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProvider.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProvider.java
new file mode 100644
index 000000000..3b7855e08
--- /dev/null
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProvider.java
@@ -0,0 +1,10 @@
+package eu.eudat.logic.security.customproviders.OpenAIRE;
+
+import eu.eudat.logic.security.validators.openaire.helpers.OpenAIREResponseToken;
+
+public interface OpenAIRECustomProvider {
+
+	OpenAIREResponseToken getAccessToken(String code, String redirectUri, String clientId, String clientSecret);
+
+	OpenAIREUser getUser(String accessToken);
+}
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProviderImpl.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProviderImpl.java
new file mode 100644
index 000000000..3d1d7e276
--- /dev/null
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIRECustomProviderImpl.java
@@ -0,0 +1,63 @@
+package eu.eudat.logic.security.customproviders.OpenAIRE;
+
+import eu.eudat.logic.security.validators.openaire.helpers.OpenAIREResponseToken;
+import eu.eudat.logic.services.operations.authentication.AuthenticationService;
+import org.springframework.core.env.Environment;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.MediaType;
+import org.springframework.stereotype.Component;
+import org.springframework.util.LinkedMultiValueMap;
+import org.springframework.util.MultiValueMap;
+import org.springframework.web.client.RestTemplate;
+
+import java.util.Map;
+
+@Component("openAIRECustomProvider")
+public class OpenAIRECustomProviderImpl implements OpenAIRECustomProvider {
+
+	private Environment environment;
+
+	public OpenAIRECustomProviderImpl(Environment environment) {
+		this.environment = environment;
+	}
+
+	public OpenAIREUser getUser(String accessToken) {
+		RestTemplate restTemplate = new RestTemplate();
+		HttpHeaders headers = this.createBearerAuthHeaders(accessToken);
+		HttpEntity<String> entity = new HttpEntity<>(headers);
+
+		Map<String, Object> values = restTemplate.exchange(this.environment.getProperty("openaire.login.userinfo_endpoint"), HttpMethod.GET, entity, Map.class).getBody();
+		return new OpenAIREUser().getOpenAIREUser(values);
+	}
+
+	public OpenAIREResponseToken getAccessToken(String code, String redirectUri, String clientId, String clientSecret) {
+		RestTemplate template = new RestTemplate();
+		HttpHeaders headers = new HttpHeaders();
+		headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);
+
+		MultiValueMap<String, String> map = new LinkedMultiValueMap<String, String>();
+
+		map.add("grant_type", "authorization_code");
+		map.add("code", code);
+		map.add("redirect_uri", redirectUri);
+		map.add("client_id", clientId);
+		map.add("client_secret", clientSecret);
+		HttpEntity<MultiValueMap<String, String>> request = new HttpEntity<MultiValueMap<String, String>>(map, headers);
+
+		Map<String, Object> values = template.postForObject(this.environment.getProperty("openaire.login.access_token_url"), request, Map.class);
+		OpenAIREResponseToken openAIREResponseToken = new OpenAIREResponseToken();
+		openAIREResponseToken.setAccessToken((String) values.get("access_token"));
+		openAIREResponseToken.setExpiresIn((Integer) values.get("expires_in"));
+
+		return openAIREResponseToken;
+	}
+
+	private HttpHeaders createBearerAuthHeaders(String accessToken) {
+		return new HttpHeaders() {{
+			String authHeader = "Bearer " + new String(accessToken);
+			set("Authorization", authHeader);
+		}};
+	}
+}
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIREUser.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIREUser.java
new file mode 100644
index 000000000..e20b65132
--- /dev/null
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/customproviders/OpenAIRE/OpenAIREUser.java
@@ -0,0 +1,37 @@
+package eu.eudat.logic.security.customproviders.OpenAIRE;
+
+import java.util.Map;
+
+public class OpenAIREUser {
+	private String id;
+	private String name;
+	private String email;
+
+	public String getId() {
+		return id;
+	}
+	public void setId(String id) {
+		this.id = id;
+	}
+
+	public String getName() {
+		return name;
+	}
+	public void setName(String name) {
+		this.name = name;
+	}
+
+	public String getEmail() {
+		return email;
+	}
+	public void setEmail(String email) {
+		this.email = email;
+	}
+
+	public OpenAIREUser getOpenAIREUser(Object data) {
+		this.id = (String) ((Map) data).get("sub");
+		this.name = (String) ((Map) data).get("name");
+		this.email = (String) ((Map) data).get("email");
+		return this;
+	}
+}
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/TokenValidatorFactoryImpl.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/TokenValidatorFactoryImpl.java
index ed17db2e0..b4c5f6b3f 100644
--- a/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/TokenValidatorFactoryImpl.java
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/TokenValidatorFactoryImpl.java
@@ -2,12 +2,13 @@ package eu.eudat.logic.security.validators;
 
 import eu.eudat.logic.security.customproviders.B2Access.B2AccessCustomProvider;
 import eu.eudat.logic.security.customproviders.LinkedIn.LinkedInCustomProvider;
-import eu.eudat.logic.security.customproviders.LinkedIn.LinkedInCustomProviderImpl;
 import eu.eudat.logic.security.customproviders.ORCID.ORCIDCustomProvider;
+import eu.eudat.logic.security.customproviders.OpenAIRE.OpenAIRECustomProvider;
 import eu.eudat.logic.security.validators.b2access.B2AccessTokenValidator;
 import eu.eudat.logic.security.validators.facebook.FacebookTokenValidator;
 import eu.eudat.logic.security.validators.google.GoogleTokenValidator;
 import eu.eudat.logic.security.validators.linkedin.LinkedInTokenValidator;
+import eu.eudat.logic.security.validators.openaire.OpenAIRETokenValidator;
 import eu.eudat.logic.security.validators.orcid.ORCIDTokenValidator;
 import eu.eudat.logic.security.validators.twitter.TwitterTokenValidator;
 import eu.eudat.logic.services.ApiContext;
@@ -20,7 +21,7 @@ import org.springframework.stereotype.Service;
 @Service("tokenValidatorFactory")
 public class TokenValidatorFactoryImpl implements TokenValidatorFactory {
     public enum LoginProvider {
-        GOOGLE(1), FACEBOOK(2), TWITTER(3), LINKEDIN(4), NATIVELOGIN(5), B2_ACCESS(6), ORCID(7);
+        GOOGLE(1), FACEBOOK(2), TWITTER(3), LINKEDIN(4), NATIVELOGIN(5), B2_ACCESS(6), ORCID(7), OPENAIRE(8);
 
         private int value;
 
@@ -48,6 +49,8 @@ public class TokenValidatorFactoryImpl implements TokenValidatorFactory {
                     return B2_ACCESS;
                 case 7:
                     return ORCID;
+                case 8:
+                    return OPENAIRE;
                 default:
                     throw new RuntimeException("Unsupported LoginProvider");
             }
@@ -60,18 +63,20 @@ public class TokenValidatorFactoryImpl implements TokenValidatorFactory {
     private B2AccessCustomProvider b2AccessCustomProvider;
     private ORCIDCustomProvider orcidCustomProvider;
     private LinkedInCustomProvider linkedInCustomProvider;
+    private OpenAIRECustomProvider openAIRECustomProvider;
 
     @Autowired
     public TokenValidatorFactoryImpl(
             ApiContext apiContext, Environment environment,
             AuthenticationService nonVerifiedUserAuthenticationService, B2AccessCustomProvider b2AccessCustomProvider,
-            ORCIDCustomProvider orcidCustomProvider, LinkedInCustomProvider linkedInCustomProvider) {
+            ORCIDCustomProvider orcidCustomProvider, LinkedInCustomProvider linkedInCustomProvider, OpenAIRECustomProvider openAIRECustomProvider) {
         this.apiContext = apiContext;
         this.environment = environment;
         this.nonVerifiedUserAuthenticationService = nonVerifiedUserAuthenticationService;
         this.b2AccessCustomProvider = b2AccessCustomProvider;
         this.orcidCustomProvider = orcidCustomProvider;
         this.linkedInCustomProvider = linkedInCustomProvider;
+        this.openAIRECustomProvider = openAIRECustomProvider;
     }
 
     public TokenValidator getProvider(LoginProvider provider) {
@@ -88,6 +93,8 @@ public class TokenValidatorFactoryImpl implements TokenValidatorFactory {
                 return new B2AccessTokenValidator(this.environment, this.nonVerifiedUserAuthenticationService, this.b2AccessCustomProvider);
             case ORCID:
                 return new ORCIDTokenValidator(this.environment, this.nonVerifiedUserAuthenticationService, this.orcidCustomProvider);
+            case OPENAIRE:
+                return new OpenAIRETokenValidator(this.environment, this.nonVerifiedUserAuthenticationService, this.openAIRECustomProvider);
             default:
                 throw new RuntimeException("Login Provider Not Implemented");
         }
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/OpenAIRETokenValidator.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/OpenAIRETokenValidator.java
new file mode 100644
index 000000000..74981af98
--- /dev/null
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/OpenAIRETokenValidator.java
@@ -0,0 +1,52 @@
+package eu.eudat.logic.security.validators.openaire;
+
+import eu.eudat.exceptions.security.NonValidTokenException;
+import eu.eudat.exceptions.security.NullEmailException;
+import eu.eudat.logic.security.customproviders.OpenAIRE.OpenAIRECustomProvider;
+import eu.eudat.logic.security.customproviders.OpenAIRE.OpenAIREUser;
+import eu.eudat.logic.security.validators.TokenValidator;
+import eu.eudat.logic.security.validators.openaire.helpers.OpenAIRERequest;
+import eu.eudat.logic.security.validators.openaire.helpers.OpenAIREResponseToken;
+import eu.eudat.logic.services.operations.authentication.AuthenticationService;
+import eu.eudat.models.data.login.LoginInfo;
+import eu.eudat.models.data.loginprovider.LoginProviderUser;
+import eu.eudat.models.data.security.Principal;
+import org.springframework.core.env.Environment;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+import java.security.GeneralSecurityException;
+
+@Component("openAIRETokenValidator")
+public class OpenAIRETokenValidator implements TokenValidator {
+
+	private Environment environment;
+	private AuthenticationService nonVerifiedUserAuthenticationService;
+	private OpenAIRECustomProvider openAIRECustomProvider;
+
+	public OpenAIRETokenValidator(Environment environment, AuthenticationService nonVerifiedUserAuthenticationService, OpenAIRECustomProvider openAIRECustomProvider) {
+		this.environment = environment;
+		this.nonVerifiedUserAuthenticationService = nonVerifiedUserAuthenticationService;
+		this.openAIRECustomProvider = openAIRECustomProvider;
+	}
+
+	public OpenAIREResponseToken getAccessToken(OpenAIRERequest openAIRERequest) {
+		return this.openAIRECustomProvider.getAccessToken(
+				openAIRERequest.getCode(), this.environment.getProperty("openaire.login.redirect_uri"),
+				this.environment.getProperty("openaire.login.client_id"), this.environment.getProperty("openaire.login.client_secret")
+		);
+	}
+
+	@Override
+	public Principal validateToken(LoginInfo credentials) throws NonValidTokenException, IOException, GeneralSecurityException, NullEmailException {
+		OpenAIREUser openAIREUser = this.openAIRECustomProvider.getUser(credentials.getTicket());
+		LoginProviderUser user = new LoginProviderUser();
+		user.setId(openAIREUser.getId());
+		user.setEmail(openAIREUser.getEmail());
+		user.setName(openAIREUser.getName());
+		user.setProvider(credentials.getProvider());
+		user.setSecret(credentials.getTicket());
+
+		return this.nonVerifiedUserAuthenticationService.Touch(user);
+	}
+}
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIRERequest.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIRERequest.java
new file mode 100644
index 000000000..928ef2b55
--- /dev/null
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIRERequest.java
@@ -0,0 +1,12 @@
+package eu.eudat.logic.security.validators.openaire.helpers;
+
+public class OpenAIRERequest {
+	private String code;
+
+	public String getCode() {
+		return code;
+	}
+	public void setCode(String code) {
+		this.code = code;
+	}
+}
diff --git a/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIREResponseToken.java b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIREResponseToken.java
new file mode 100644
index 000000000..372a3482e
--- /dev/null
+++ b/dmp-backend/web/src/main/java/eu/eudat/logic/security/validators/openaire/helpers/OpenAIREResponseToken.java
@@ -0,0 +1,20 @@
+package eu.eudat.logic.security.validators.openaire.helpers;
+
+public class OpenAIREResponseToken {
+	private String accessToken;
+	private Integer expiresIn;
+
+	public String getAccessToken() {
+		return accessToken;
+	}
+	public void setAccessToken(String accessToken) {
+		this.accessToken = accessToken;
+	}
+
+	public Integer getExpiresIn() {
+		return expiresIn;
+	}
+	public void setExpiresIn(Integer expiresIn) {
+		this.expiresIn = expiresIn;
+	}
+}
diff --git a/dmp-backend/web/src/main/resources/application-devel.properties b/dmp-backend/web/src/main/resources/application-devel.properties
index f05d23d04..ed4bfe83e 100644
--- a/dmp-backend/web/src/main/resources/application-devel.properties
+++ b/dmp-backend/web/src/main/resources/application-devel.properties
@@ -52,6 +52,13 @@ orcid.login.client_secret=f6ddc717-f49e-4bce-b302-2e479b226a24
 orcid.login.access_token_url=https://orcid.org/oauth/token
 orcid.login.redirect_uri=http://localhost:4200/login/external/orcid
 
+#############OPENAIRE CONFIGURATIONS#########
+openaire.login.client_id=
+openaire.login.client_secret=
+openaire.login.access_token_url=
+openaire.login.redirect_uri=
+openaire.login.userinfo_endpoint=
+
 #############CONFIRMATION EMAIL CONFIGURATIONS#########
 conf_email.expiration_time_seconds=14400
 conf_email.subject=OpenDMP email confirmation
diff --git a/dmp-backend/web/src/main/resources/application-production.properties b/dmp-backend/web/src/main/resources/application-production.properties
index cd4b738b6..28aa72581 100644
--- a/dmp-backend/web/src/main/resources/application-production.properties
+++ b/dmp-backend/web/src/main/resources/application-production.properties
@@ -68,6 +68,13 @@ orcid.login.client_secret=
 orcid.login.access_token_url=https://orcid.org/oauth/token
 orcid.login.redirect_uri=https://opendmp.eu/login/external/orcid
 
+#############OPENAIRE CONFIGURATIONS#########
+openaire.login.client_id=
+openaire.login.client_secret=
+openaire.login.access_token_url=
+openaire.login.redirect_uri=
+openaire.login.userinfo_endpoint=
+
 #############SPRING DATASOURCE CONFIGURATIONS#########
 spring.datasource.maxIdle: 10
 spring.datasource.max-active: 70
diff --git a/dmp-backend/web/src/main/resources/application-staging.properties b/dmp-backend/web/src/main/resources/application-staging.properties
index 3cdae2ccc..8ab713dfd 100644
--- a/dmp-backend/web/src/main/resources/application-staging.properties
+++ b/dmp-backend/web/src/main/resources/application-staging.properties
@@ -74,6 +74,13 @@ orcid.login.client_secret=
 orcid.login.access_token_url=https://orcid.org/oauth/token
 orcid.login.redirect_uri=https://opendmp.eu/login/external/orcid
 
+#############OPENAIRE CONFIGURATIONS#########
+openaire.login.client_id=
+openaire.login.client_secret=
+openaire.login.access_token_url=
+openaire.login.redirect_uri=
+openaire.login.userinfo_endpoint=
+
 #############ZENODO CONFIGURATIONS#########
 zenodo.url=https://sandbox.zenodo.org/api/
 zenodo.access_token=
diff --git a/dmp-frontend/src/app/core/common/enum/auth-provider.ts b/dmp-frontend/src/app/core/common/enum/auth-provider.ts
index 460ce2b50..3dcc29b9b 100644
--- a/dmp-frontend/src/app/core/common/enum/auth-provider.ts
+++ b/dmp-frontend/src/app/core/common/enum/auth-provider.ts
@@ -5,5 +5,6 @@ export enum AuthProvider {
 	LinkedIn = 4,
 	//NativeLogin=5,
 	B2Access = 6,
-	ORCID = 7
+	ORCID = 7,
+	OpenAire = 8
 }
diff --git a/dmp-frontend/src/app/ui/auth/login/img/openaire.png b/dmp-frontend/src/app/ui/auth/login/img/openaire.png
new file mode 100644
index 0000000000000000000000000000000000000000..473bb3f59fe49bd9085c30ba6c0cb18540887e94
GIT binary patch
literal 11910
zcmcI~^;eWp+w~1Ns30NT4FZw^(jna?&47e7NJ@7I!qD9%prmv+f=CGnNOz}<fRgX=
zdEP(ZTi;sm53|<HnLDp@oqg@Suk&7ARSpY-3<H87ECqRKO$b6E`S*E%4o1Rbb`cQ7
zp`sxDLd!GjpdH7ad^>&nu1|yct<uff9LL^4i<Ir=+V&AsQpm`mvU`c#Rt62rp0WLp
z7c7yXNl`v3-vfJToY&xZ%#xfDc2AhY72@vM;9?Xob7T}8P01WM5K$TzH}dFR*w!wU
z)z<4s>9p#2yYE#tRVY6_H{H;!WOM#XD|r0qPJ~(_f?o6Z%IWLhQ?J|$ubjsH)6Jnk
zn!~<Okxm%Y1ke9X+$?GH6tYK!Zanq}J5%-V1?oe3P@o_rK)AJ70<DyY^}n?b+%<MO
zv8aR1<ag0jjE0IVqd~rv>Mi`b%!_D{Av=i<G4YpyChWf?y3+$qs@PnMQACJ&jl3=z
z_QCf(VU_UwI(kOpPIL$b+Q}E$)Tdroyd;^~f824wyV*R4PC)XZ=zAC=BXMuD<St8;
zNV36rdzzH#k|@!tkD3ryfKm`@NF9O4vAF94=;-Ync1`HqTeoEuxvb|O(q9C<FbIC=
z<?o}&(SZSFO*WL9bPqHcpKw<a)B7HKl|<Xfs++_WTT12}4-zV>ZD16YpyUnN_&oX^
zwzbK1?2m`mJrj%?!prV6xlQ$zP?0n4a8qaHPtf;wMrg{7TXnP}s2GnX+~OpTl)%Hi
zC~^1{QY+S9zi(n)cmV!{z@J)K%y1|1oLeVU$X&=m35^ZB+e-KM{>JR*eK!AY9uzSo
z40Q=RM8WdDLR~^7SQ5B2Lj?nq)T;IGn|9nbF^WF5@4B{v!xjD=PNU0wh!RMtI&aF|
z^0iG`kyHqefTYh^m4L%uVepGa$zfifrP1rG=RGW3=ph1;w}&|iQO77<4yyB#>79bO
zbDymOcR7R{BC_-DhX|nmg8Pr7tQ8=W!TtP)Z0HZrVd%~X@B@U)xa9D2yeR(ZwWun&
z=@VwI2>Jt+T+9Yj^+r~f=0AI2>S7*V7Ie`x6fT>9xA!VJbb8>Z$RV~@_t<^B{EK<S
zNQAQu{%%zPr~a+9cHLQN#<C>Ubf+_a)n%gKL=99B{0c1)37vpxzY}BcL$!+DqEjiL
z&?me3n?l|-;MUv82@k$ldKI{QeZ@HM0Ky-e%?$Un2;6;hg<-!Sv!~wI^dk|smI7Kp
zgI?u3_3lgZU_%qXhd<Vx2DM(~{w0O%8$CNp?}=S;d!8<d|4{KinU6IYBfle7j5=RN
zGhOlv2t8Jr6RRG{>vDS#S<tL4v#u?JEVIpd!rwGsyc-2MAuL3{MK>-yyBV9g`$hhI
z#3xzJ*O#*Gw(H4izj(`Y)|1}c8*Dte0J}y(p<}8=k4Ym{WqS}ShsXkJqtb#!<$D(Q
z6}mk{n*I!q{c>8*y-7br`v2t=$G$rgzX`DOzZ+)^yn1zamcVb$51vP<wQ;eJL^+eT
zpOJ&sG91O^qLf~UV!LI(Dtu|ow?DqQJ(ulHqtl<VtK?1F(&HeIv^Y=~eS?}kJ-BCJ
zf%QJVvyHqq5(lm8dC4Jn&rL}H#{Qe8ZX2GAcVL;3!_aLE`kLyDwChZ@M`G(FXBuOD
zL{&4t+uNtdZU23+Jl`<#N!`Q%mz(2IIbv4hiM!d}R?GfMtk{iBNrknLOV|W43IsBQ
zikkz5XLfG#bo$6G;54yGgjK3i9YeqYO$D4CdfQP=11SqS$h9|#jsJcsP-0EVS%>{u
zD{oMPV1yEb31ADp>ioomN;Tge8~lvq9I!&)rnt=qQYqu(V=#Gqw7u1aey-KAN3R*g
zQYpjSIE&fUBBX<CB<0ID|1t@G`Aqw!>6dJYinV2yfcZR;x=F?Znei4p=UwvBjDYgR
zrA+dL_LSIJ*WR~wns?EEeqzm#ik-iYtuj<>DC?I?<>;OD+K-}l4V%c-6SGeIu0y@1
zBdbw2A{DZZ4>^@gHt3DKH8OHC(mf+@B0|6WhLzvx5>hs#Cop`ve8fjhopHNDCvta#
zJSoGe5T<>u%Utj92tA}tC6FYw0S7DQPD(g3YV?fyDy?X}`eu>ql-h^=ajL=Y-486T
zON$}2X@@JB<p$1jZJMA37V@W=hB=)JbB8<Exl2D`IVwhR;&$o8lcz6y>A#0K$EkDu
z4J_U23}4eEr=DG=x5Xl++@YO}%)7sid*f$L51lxa99qlVj@dsvx`~Pvetvhq^X9?r
zSzFQ6Oh$4DAO23afCO_I0kpynR&$gRF{gphlG?2eit1<z8|5Th%LOm(nD8@?r@>T+
zk)5@I(!WiU?rA2EAxqusMhe5PRv*n;N0cxzQ^?$Z(FYDpZm(2{O`=hSh;f#U=g!}K
zI;~d^xI!+c@7=FeZ+UcgGDcjEXlGkBhdaz?62tmsGxXqY#6~d~x8~4^7?ed|hC;8w
z5=D~gR^3br-3CnTry8<|5J$;0bvqb+RJdSR@(Dm$@>yO$ioabydxwfF%)O&>fmw;r
zHPLao#;B;05|Cs*fF-tO%EMJ_%eQfdyaG_6fiS(iRTAhi!_9UCE@p(2jGJ4~s+NrT
z-R4E-9VdU&qMeTpozSEzxdbKw2{|}jWH!=00m-(nP@UxgkATI@a??KMxOw7wamynL
zo#as>8)!<ho(B>!b0vX{Ei3(dEZ|x3){&7a8n(0{P*vX@NA>`DgwN7kIO@l*RGm#8
zP}rp|t-*WoedW)^HwpvUOc_XC26iVf<Yf_qG$2nd$N6G|mO)_Hrcfdgl>ZeRMiowm
zAyaH6%Y!{^Cm(t&3Q!tz#K}!D(RslJ%{thND+zZ!frCx$r^w-_k1KcZ+V?{kbC>fi
zR6T8mZ|Bf6^19R|5K6w1!?*3xN`*2hXClIae7;e*n7j^XHq`4v2X$B~{gSP(@Citw
zz&m8)*5W_sfblNcDOkz&XE02gMZ`L*2sub4I==>Zy8o3Q1M!7nZ30PvoxmA>+f9*~
zMb@Dm0W+WrBwO{d%C^P&>)6Rt8OO#U@KTg?Ytd2YS#@+?mtF)(s(?!ior7D|=J{^=
zxRv1Oyr#{T>C#OLKC<J&|1afbfY8g}fZKZdnA|Op6|><UjLcj_)jy6jhdWGrwVpgF
zdFM!M7L+oaO~V~N=|1MO_lmRUX~5OIoq_1}-U1!PpKiy)=N1pC*CTPb7FF6m)T1sG
zH$+IoFUdZA$$u{*$af8kK{gz;7<GQ~MeH}j^I!Y${k{9M+!=CrHU#^5KEUy(arsqn
zKo+~;l%eG)i`wX$?;+I>CO&2|VQO>-ym}fn^h~Tj83mF{aktv$47$GU(R3~hi7xBE
zpY~>;ru6V0tRJ<ni6D>ir-lAluO!=dBJIY<9UlL9gzFr3xE{!a7#rSqsOBgeZPvD*
z%eQykEI(AZQ}nc5HM<{eScb+rAI6@vHw@%up~8w^0QgNjHT^y4X1O64xh~uTO&a~?
zt_;s==(UW&H$5a#Hz8x7wWKZ*xUL@jwA#@A5a-=<s)xuU;jGAkpTqDp4>=*zZEFxj
zESi2sD#%l@cT7bUYkB*16ihhcq&*?lSthF?<k^$nwySCPH$x`(FqF|4`pPA2c3x_9
z-|5F7-K7z0Cf4hw)a%}JHp0x@9yE2UN{>4l*-?Mj2cy1x0$_y#I{3i#+f3_ZnX?Zy
z`?G!1H$YgneGz5)29X9b+{3M%yj^Y{eZ(??>Lz>Je2VWQUCMqC>5qV;<mSr7zwv;}
z6&h;gb^Qn;NqvJJh(cyA2Mdrpd{(|CVcnb8QSLN{jp=y>z7MIAuktc;z0G5t<0{I>
z!L06TP3nL15Iyba<$X!=BkN7spJM%IJ>!1-i!(ODvYQe?pU|{N?z22<B_X_4(<Eu!
zq@hC!Le_lMMu60b-j^c35OR>O4McrO|Ju$QGc14k%@l?W*(0t+E1b~hzO=)w9`*9@
zEv+<<Wq+=^>WXKT<gl_&c7UF6PLS}k{^?XOU(k_#Wd=?N2kGPl=uGm{q;o#gNhc${
zj$Lzjx+;rFdDuS3s}8Wj*kuBie~z)#S$KMQTmI&V8n72;+W1?+((D<h=`B%_b-`VE
zN42#`*KdG$fm4hQraoPEEcN5cal{f$G#;R@a(|YL0Kqy>f>XSew;l!5a7bEDh*kF!
z6&LzT^14w0+x^i~9sE_FSZcs6IG~>vR+N*+cV~~Tx1(!)u-`q8$!|(S6HOzNkI)wn
zGsSsW4OK4guk3VWV(-qV-CZnRjX5#=9iO=VuuLJ2-T8Ocxk-za{pM~h_wtN0{n$`Y
zPB;YhB{^@3oLmJ}ExusOF_X*%*V!gM^yj5Ze5czly4It2<YEr)h*%DIVAS?lZ%<VK
z7AEyIng0dn9cn63<<xCx+9F3EDzCAmA;=zbiZE_xuh+Dfrw^eRxj)7l2&E<IwSZB#
z=EcvWo5B07MxRHgu=ZPwl*WwMZiTxxm7JVA9;9*@!|9pOzaQL8y035~D1bmQ(pm;s
z{Q5jlVkPTX@2UJ62GX(<3UttkAtk)dB`^!B)rpy{G>MxLNxAQ-KTWSM%H+b%wx92O
zj$2_8Fdu|!p5tG3|Fxjw^d5J-ov9#abnhnnS;QPDAc+ipY|%K{a;c~Dp_?;$+Pp)Z
z_H%>;BuG6!w!te&HZHqgX<u1G^;YVpN{Bz&F2&Ri%%g(8%Nsr08pKnZ-hcLHu|2cO
zcX$!RJ!Tm-U>An5>fXJF9mHF@I}gY>Qje8OqdS%g;iuPb*f_ZMYmVsO;4D+#PmY1E
z2GmKO!V;+KTcj17E**f&Ju`TX(8q8EgL88m2_p?&0#f|EE&(*1wFUuJ3<Qh1NfrvM
z-=B-I3kA@BRg~6IK_DxFX?{oqIlr^CgD*ZbIf_IBXM{{C_{hI4Kk^GTdY}@BYL1$M
zG{~+6b^S&!gCg8Zc}pUQ8)d+&;<jOqt)G#AG!u7y!W(ij6ktF{s05>$Qz<nH;+qkX
zx6a)Qvx_!dVgj!hJ2l&Qp(jFRhM1ZmOO^ZY(6YgW!T%14k|gGJr488P^ed@GN;6CD
zeJ$@8)l;$rQAm`A-PvIDzA54Y6O;04{o_hwos=<1H}jl}3MzH&y3Ph~<qZR7Bl96~
z%tH(egqNzmXkO`-^ON__k}9h=bHm(Wuzm)%ZBZFoAD%pBvaMcqNey0p=!6Kz5by|a
z2XO1q^|mO2%boL&k?-cGlGF(u?uX%_h}agRtDD#cT8QfK$G!_qyQ!Hnr_;@IcChh9
z2MLfymgk1IuDbS(o=DQb;OMhATqL^oIXEGtUxWUQ_W02Ut~YXptOkLa8Z1=&FVSX<
zI(%ns$PFR^ujL`YYc$TxA@%#Z#x0xy1{xugzBN-Tkf!1eztSAAyt(S7)<p^*A80yK
zMi%V8f?i-qt?TRXfwe&o@K*|>_ncuZLBez)hT(B)hpM@k^lrPO9k_YuW}BR~8_&xr
z-$(6f{o_^nrCZd+TyF7g7xGvDNFNM%0XY)U^Bpk!T@8$NcY^m#zX^&GiE%WnMW)Ze
z5ihh()Fw!DwUMzbk(OsH36vp#j%uD7|Gx0e>Tf#4#!#lj)lKhrw-^KTqmdag|Cpig
zKq;xASQ{jYU!cDn0L}Xp+eQeCTcaeQq2ot@X0agVr{nBo3l9na+zKmvdZ0<4c7GBA
zYjJrJ7S!{-1TYwJCDVn5qE5#HV(4>p&-ZXJ<e@>*NH2j?jG{M<^iz~_+&?B)GAnxf
z_P5=SW&V_W1`b@p>*XTuHzk3nlhC*xjZ`(tZznnqQ;}i}@K$(`Z`j01E!*~pI$0~d
zM34;>gXH*JZY5svOPlY`ggLEFXtCV^&^Vlrw*EL3zx1b(sQt!dXrQ<jRCn$3##XCO
zU6<vXOzagau&XhrJpy`yFY@JZ`~{H>M39D_fB1!suSgTQ{E{GA5s^<gUKLil6(EtH
z{zDr)FB{V|A2tR87Uw8LR)Wn|Yh&$nJ;3}-w@;>%h=>~2nlU-9x1tic?(qol7>TyD
zCoF2U&66^gVNL3yYOJh(sJnkg@tIH|!hT;wk3i6&*4;W-@Qs=|g)F<r<X1qGmWV_@
z7v-6g^NNW<5hcMi)gQxru3X#R>1Yq~+xAzuWynU0?*O_p%C}#2F=()UNqM&ZnBwoI
zexE?a-{a4k+^LFZi#lM=Ri8+IydYSEOF)82%cpqpvQ)zWD;Kv`921u4SZ6-zbi;Rc
z5#3(YDSI<9$F+&-b&QMIP4WmP*}YL%n$c+9TsI7;B{jg(25Wit|0vGog5=v**nmuC
zjUw92W_+`Oy}@{S)t>_kEV16QEjNp|5apCM531G~S^nOhA`K_gp7I?Y-A9MUl*bTe
z2VtnpTm%nciI*d%<s*}}Z2Ml%vPo?|k!7fJk?KrcBcab<M!oc>YdNz?{}yMvy5j+c
z4Wi-`u9=%)OA(84>zsnL6c|;iNXmaqATwXiYQP0#@ZnEdR<s7Qyhj+1EI?@xq_rFq
zu<rT$aiz0xc8%vhe5Fn5Q$QstQ9*F0S_CXZ({~=WAX9+2MX}T$o5areEJka2mk$E0
zh)_bgf2b#kP`ZfAO1YpQNG&p;Cm_DeyKj!4q)JvEuAg%DL2vX*ik2wOMvbYzhze>_
z0o<U>*1vI)JH-XCyLvavdukJP0Dm&o2`cPBb_gdK*gx;#PC1ij+rD{!>qtwK=J1+}
zo5Ksmq_x!AAJ7$w$O^5sLqO+Vl=Icx2O0!0a#3D^TWpBeH6RuF;n_9s`{kXX2s$Xs
z@T@HwT2YPA=iJ@sOupttt~yU_{5UaU<~Rp6jfb7?*<r+gNUw_%l^H(CMm^~bT4liZ
zv#EQ(9^tm^%=~#wKx`#})Bi%Uo1v=ouLm=~+TQEYnsO^$As$K5wCJS!q9pgn#s6q@
zQ#;SaxHAIE6S=m=#>|CH--jBmH(fhsBRq%rrzeVE8J1w}x;ef7!4MieNLiYZ+q0?J
zn`NaxW+KGn(q|)uOORG9sZm$Kpj$laB4-e0p7^r&!Z}OVbq;p}qe<G9PGHo>+r{>e
zd&*f~c0<vW2}tzIdMRfcj_)Bhn)2}*{7~TBVAvrv<ZWyzc<idD`y(r_i&xMLjscK~
zoI#1`FIq`K@Et9fjI8JPxY1$7Fc9)5k5j3%r>-X%*gF$hz>5X&5_wi@3tzki$;2L7
zU~Tvgec;UE<<I_<gpnRP=mS&9yIlKebc3%3z?+BzknIDl_)u<)?Bsl_+)dY5@P5PX
zMEnUh?pOyBiV*5&&V7H#duc}=g>h@B4mZI6ZDK$H+yyO}`FPw~R7hZ{dX#P{8sk=%
z3%~K~MUV|WNJ)?*_qF(_i~S@-V3zvRiKc?bnUZWy-)zir?ErvDMd;$oN6d~TcJRRQ
z(Zh&QB&J8e6*|oYt3spm=5Pqouq8BrK~}I>E9qn}%<W9rVnrtd3rGPq0R(Z0Rv0%^
zB4}3v-08h1pCP_k12y!9sla@y#x^EmaPZ?wE>pLGOayGyfLCmS4j8MtAi*kF=ZNTd
zjZgQ*KYea9fC6#8cJdkN>5U3UWv|CssGH#4%SYeprg<QVML=@z#Yf<x(mde%@9_Wf
zix;?|WXxO-g4NMr=r3?>!FB(?4mRD@AToo`DaY_E)|lBxZ?;)gt33^Nqk4O>VI<}w
z2bNbUaNM$YpJpeE+=m9_OT3aP46D@}H{}g$`2CLF0~?ygMo0`3I)3NXNCLR9q38@S
zs6`oxbDun6E59GO4kW@F&>l&Hoy!=|D~13&LTac>|0Zhozjia$GClrjo4?}{7WBqW
zxjX_W+A1ofVPY4qMzg+l9WAiJpsr%{N8_RyT3RQa%zdbbz8%lZ@aQ<MhD6-XflRSN
zPkS>oszJAQYTTSTI?!}Z@yNlqHnKvpQr$b~G{`;b(qY>i9`1+Ow-%*q1rPlfxNWg9
zUhm|Ais=AiiC6^_L6Uj|Otlc`^P-vg@2IqlEV88`XJZlm5-CBArWJpYo7E~r8w!wR
z=RlsNX(Jcg?}l+8lko1|mb^u9jZ{$^7s;G$O_yKC6*WcZs_(ommXfI?8G+<j1cof-
zrDX-M*^LEA=9(I9<8(E6J%BnPf5?4BkFkcjL2mLIU{z|qi3@+&uXrLFMq=uZbw9qR
zsyx9UW@YcT3#&T$Sqz@~%T6~?BQ@V+44MQPiI<yw?$Y^zxvX`TrRn1Qld5();b~Gz
zUu!`ZbL18!8O2PpcP!TP3f-w|4^UT-fXkkSgz^erj)23=v~wE3HRRZ`8seMYQ&uAs
z54^xzCOwRIo*VtPKak)3>o|U;LVpWd@iWT&`YAvN1v<&3l+Z?AY4P2`pp{TPD5Q&0
z0`w9bz9=Ll=Ufm%o+DIc899r<Z*E0X_UN~fdL#f#zQ;tM>_4=Tu(JrP5^^XG5nLZx
zaP~2>|5N0-m-fgpO@X$;0y>_VyJQ6HhzF?{H~sEGIB64p7-r`Ev?IZ9O!fCzng#aE
z;f~~ABC{BVTVLHTWYh$<nHJxx5ercY!s|xWF~kyMAL?>t9e$tl5)44nM0&gx;5v?A
zA&>3NlzjWsdbXL6P8?Fl0g?^$KGKbXFFtG(NX&lFF*8);@L#l{*WunbhsSS9{3hcp
z0M&>Z@-6IvTtSs&$R_<X&o}u+J_1GuW=K;T=@{QTJ(I_oD%t%ZV-!JA>cR2B3#3UN
zX1{QKABOyAkKxE`T!T=ri&~(yD=DiUdKq^TH<WCw%|Iqr_1lSAwADGyz6iUjBa|s*
zBYGBaAZ9+`!Rfj3O*8{E-Wj6}d9Sf;`%RSolm}=otx-204qy{!w!vjgW9phbvS6?&
zY|%e1yRhci2R6OWzbx^wwKB7G_Weow<>_(65z4<_z!pZ)d)C!Z2Owb^9xVHmPJ=t{
z+lL-ck<~Um(@m9+EC7k&+sshH2#D1oa6BHDp;b|APXS0irbAhCu_q&=7%0*tH#6J*
zx^qnRyjEp?53H==KO{5eOgZ0XO;nBGglW=n?}DD`#cFG|6I^zBfl*;{!t0Cp53Mc;
z&|i33@%Ql+Ft6WUbWZqOdWQ`(aBS<>2?GZTgN2fdL6`Y#-b%xP?IEJT`i=I8xb;ca
zmyav4PFbn89}FU3uT#$2>`$C@C5OcnUH$uvHC?JFt^~=q7F#^bcRD~c@!i<$IKE=X
zYwZdqC!l6qDwt@=wAKb+oL1su{%GqcyPty8G0@e;@}#XmdH7oA+XqpKRiCpW&!QDE
ze%dkJk!%}$g9iNWnl2Ki9$*MI8TCJ?4%B&3!5`)PUiK5J8PC+IF))g*Hag|X5Uy2I
z4YboW1k5j|+BC4fQw(`kEcBNu0!T{0tqpRC{S;XokT<QB#2PuB9HI0|cdG5^{Rp_K
zn%-z8YhyY7`osw2WCbiim;%Fsw7+Gl_snOiu+6qoTui+dzK*&_+I5r<xyz#dI=oip
z|3zUnc-|>?fuleARKJ<QXv!dj-Uemp6N>BW=m0j>Kd}>U3QY^xBn(IMzu#phM9C?X
z1@VCf*#H28wh6?0OQM&~B_jh(8SdfrN(iNS`H+u%pUa;}37^+ks*d`Q^c}#P7f7^6
z_IqlXI!yrdFhWgaQi>6?qBNG`;-Wlc`nTD@9HO6EvG@}8q15M0P>ZiB);Y&QbP!B5
zoZfIFvcN&Huc$<eud_t5W8idQK{L28O%w}C1Uy3_207gx%?t>d_Ba)w`(lL`o?dT^
zeuJjOi>A|-b->YO$W(ej!(vp?0tGZFRVX-yTSEX$Duqnb7=rO5Ce>8OG|+i4tT&>g
zUjOzlP0Gvah%5yiWr&l}H|CKFh2dw8>(4qlb?*@qtxrsZKO;~UOUA7Yc=ZDQt=hPA
z7Oa?n#~4h<pH`16@i3TrLI0qWL4UlSAjbg~I1bP)H#~T-1>+h3BR+s(a_x~$I5;)G
z^T_IKhP}V&KA}u)-ASFIlRNOGs`L|p8-xT_WVvfwitNQXz<F(awPXjb5)QYSzhlu<
zuLY~jsswe@a!6Iq0k7BED*n+K-{_L%@%H=d4wKXVnpwd?K3*n(&JaMim8@iqxsmrl
z5Xs3X0)~RG?=_ZgEn~nEZ+3^j@-S^5fwh+l1)7AoIx0lW>b@Ap1~y_qH-;l<hHej@
zevgnsQ@$W`90wI;CRGYOp!VkI#wtg&<+#|2yuK=3K%?pN?yukBj_H3ivnm?rb2&zd
z>f8jVw-%S9PueY%0$Q~A95*UQowH_Yu+82&eOu|>F{=DgE-N|gj|GuEPPO>G|J#K*
zO+>ds`X7k|u@isJ8lczhg?A^QW}LW+1X|CHIW0@YN|tr=9b0^aQk4M>$J131^yPG5
zP8W`Ex+GWF_z7yc6La@m<fsmQp@&R16k=4rBEzlgrpm)XG4qqmscNj3R#W7tfj-Y8
zW&r#~Yo$7t(I<Liu{1aF=rUsgyjf_ytgghEpHywE&f>#Ov*kZh)Ct(%<(Fq-{S)v2
zdJ?9$!f>6hF9@`iRB}Tvc(8XQsWIdZ^ZP>&C)Rqt_S3O6dL|yE8Ob1&47Fvhga+jd
z*5h|kpY#{yvdzP>{S;))M3V(nSXWY?l}tS)T?k@LM*7lmP;NY<kJTcb$DQbG&@Am9
ze6Vb{!yWE*k;&3*-J~`3<!R4_>|XttBFI)%JiCGs3WYvbipAbGP?B^1^&0tJbr}(+
z5Ua{<Rh;DL4A^y)a(3#7D@4G4XC6Ax5_x74_>d(tHQ}4-;6AF!(3Zi}*~`Tzyncme
z7F08T@`3Co{<edg5GwxGo)Vhorv+*wKiMm7q#CKHED7*9*jtl!j>#uGotI0w&O^-L
zWcX%5-pi@Bix@bWp1%1#0CPh{?z9ucCs`tN&RH6uo1tH1LHfFda^GtJ66mPHb$CR1
zTEtoZcxZbns%zBM80P{zb&DS_RU2vL#yPOEnl0-Z<;<eqy=e4We@r*JFKjpyd@&-N
znDEh(Df4LuU6Co5R~?4C&U6&VI-ZJZVT@YBE_)KzAsSmglb<Uk<4xzgYH~^@(;rVx
zH3G&R5ux1NwRI^CH<%2OLMRDGr;vj3nxFD_Qa6PzHt84LS#zh(kz;AZ{J&+;s4`r}
znSEq19(_Uv(zW>H4HhV6+1e>419ZN})wb(w{M^q93=k#J0`9;ik3lJJoqgszvk_Cl
zbIGOeJFO&2;!rW&;+8m>9=~my4JRf|IZL|fe<IfaM|;SeYR*B1`D20nwYMd&aV3jx
zb2FigtL{!*E@;6hXCu*cjW3)FXDT|Mn88bv)?TI9suTc=eeE&r(;SZvntpiD3I3_?
zqz;i`S1@QHh~v(kG&3FSr2><-m@nr-2v3<keDW=oEb7abYx-IzGk!m0fD-!B6*W7z
z%<ulT<lVxGM+$iez*Fx=&%)r&h3G~VgwjkKe`x^>;r&h;7BKQc;<RPRhdc88uR(tc
z$SM=qugUSAw${A~LiyEK^+t)$&&}MNo6i6rO(c3gFQjx-BI_Rm_Hi6YSWC@9KEy-b
zs%5sb(p_hO-|zM1Tff#FV9rsG5-kB8xrvr`I)+^}kE<RFsu=eBby_m(h&N6t$Xla!
zBxZGB7H;kKkY{3J1)f16oJobcaN6rV&9_bIm)gkU{cd^g0@D?}3t5oty6pVQX&$j)
z3&qJSM)y)Sn4#$h%ljJ~A9ePLS0fR&^xpD=p%!5S8wkdiYsQ>Lz%n$Y;gYEFbqFZL
zGn?LFXsLZYFu?W}G<r0;tC;%i1%pfpWen9^!X70O;+vhzJ>;JMNLn_&?c?)>LUt)<
zu8Tr8r((CrwNf3gl;Vl6@hh>SjSR{*voPmYuoPz$9t}Nqi!Gl{Ne7Q|nFPO<DN;!V
zU~??J+Ot2hz~RQXuQzJfR14%{gKk-*vqGmnV){Va!&C>4@cPa=Na5Ww3G3{*24O`!
zy_+2qt)*_jBq`(TaqC*s(t{On5pVpFHvaf$u?7LG#*Ti*ezzIM$-Qw24|-z~LPtL6
zIu3n~@kJx|!?pXgSRGkY{iunKM7+Y8?P<Y5a_~1L{+80M%!XAQm~wsTFrngwfagi-
ze6cjY(l74H(h3ciu!Q9BF%7F`i{f#jRc~&N*$hMVFLt(b1ss{qLJw<L0VA<b>)iDI
z5*KqlH5Y218@Fv(%sG+JrDe+ss^3(N6nhA7(zDAgL2bFNQ(4U6QUWPGjE(B@0cPVD
zAu=xCjV8?s*t)RY@q`U93cbsdKWwah6rJWBO=x}EhkDG^cc2i$>mf#<9P@#PUaN3K
zNu{u_+|)*B$lI1<5AcIS$?{e0oYn9o#xHqbD(wiEf#r~@XLnU<UACW=frYp5mO?XE
zx<X$Ri_W(yDIrQT`6QGhXFjv2sTNOnW)iITc#7Z#bWm-jN0|y53X>v~)U>S~xrn1-
zr8;=2-CQ~50Pk+>Lc*6`X*h^E{Jvn@&IZ_4s$Y8819r8j@MZmw&x{A^U@XZFWqcTr
zY&}H|ooh?w!7on$F68;?Obtw#D@BBxX^rerkx|?Q6<BNSrGPRIC?@&zAaIG&h2{m`
z*f6}4-t$K!^i|Fcxfstfa}=-|%(}-OV$5!SY~sU$6fgr=39rt0SI0}W$J<Hpg^ODa
zO&@xW#7JnJh)WA~CSL{GgW`SX41Ut}p~{s%qX7&guk^3t5cQxkW%Oe}DzH+J9foS0
ziPCVqNA8lAz=y8ViN;ftWtpK=*GBpf$oN#pi#2|z*tJYS=GbrHbEpw;{01~G{Hf>w
zDDA=|bJjnqKU<y`kBtB}UlL6<2DX%d61uiWuacP!wm?-!5>F;4M5)RAG49>Fv|J$z
zdTfT`r{ZBJIox3$r`@Cyz(#9{qo#@_4s=mVNM?(Ng!gWWl9}Pw!Nw1#LgJGK;1X^s
zyN4RStK($OJQ=9T;R_}vysmoEXWuMDS=Dh}_V(7|pLYCE!V#FpE(^Oel4M(vFX^`Z
zuwmAu`1Uq9oyL+KOv2OH5^>)qNz|3CB)G_iIozW`)Aa<%4gp5uSX~x8EVZx5v8l}Z
ztfxsw*>T&VXNLMjMqj5km&EK`$mDs7o&ehfu9jfo{s=2(nFvU_8GI*#^#p#<XtFO@
z+HIE2Fy<^Q{af;->9-MGo+Y=kvz6fS#nAPo1LWD8r=KKt_mt0)HWj~l)1Oy`g$pRq
zA?+NOzCAk8XG`?jig?$}lJBWaTI>{mxMgr1Q>hJpQA92D;a+{PY^d9+o)KLQ2;FVr
z)f>girx!GWr61;;88ZR;Yy<z&F~WIw)OIBQOH-XbLdgdhuEl`JS~2y><YbY(`9QhC
z2MjSB`LU$Pe@@)LPT0rSx`O$1R_^2tlRsd|Y;Q{onCDV}w<Q3zX>F|*A1u2TIGMWE
z_bF4avpyNdDh!A#ORlS1BUJ?a^3(T2lk|Kh(UPm8fAm+sS75YNK#)&FfVU}$>g6Z=
zbaLoC&Rmj6UiRd#c9^l@SDmWaJ$t{b8PKcGZCLTm`9f$sM|8t9lj;FF8XgSIC%j%U
z{;p0BxrO1IecfRnSNIpsvw*uH%q!qu@<OP+qwU%Y(7w!#YKm90lrdRGeL$BJPMlB3
ze|8YGsMP_139=OgTlySY9Hc9N_;YQR9Q+<dyNNc&Yl=fC<#s#_Qnkz_=EpRXXv>#u
zkd36Qxg5`cuYM60Jm|Q?(eWO|r?i}S<g?p@jxZ(2ul=rGJ7^Aw9mARKT>uClHPzrT
z$egJ|wTM}2(tF`&`!_2Sf2DNWGS(uoT`ceY`2lj(sG4F9tc*w&pce>BNYOykeRzEr
zC%0;4wR!N_U=0?A@Ci3Z{Jl}E<0*jpzM;ns&x6KiHQnFWB>-)k{?Ct&IYk-_DuaH!
zt%WZw>mN1XPkxX5;SC(nVFvQObFgIvlc_3oUON5u*?_!NK#4~@qSB(syS#R)Wt{ID
zG}&%apyy-}|GNI7B;f)+QY)sr={za@$G8H%UY-1hBsE@l%WeJEOgkv(DStFC*!-YB
zu{&&=FIbHE^Y`!$O?2jyY*NADnjB#=Yb<XaVg#9?@i!1AKM;fAzVK=?Ot$@5ad4Vo
z3^K(Ji*29VTW!z3N^jb{j)3QM<&mK|i2jg!9SPXf!2fjP3tMHm1(Lf`kz1Cr=Yq`N
zIAv_~dEQ+94Ilp2;+Xa&1)u`6{{28~7bM=_2F&$o@jY~TWRaWYYvoR7VBP9Ko)wZI
zJGN|$hCruo1H0rdB;E37bl&m_5OIxhmUEWkJFb^VkXho1qlh1yIwd^xoT{o=7x7+p
zeuec#^l;c6J78*w$!i)P&=&W|>CB4<y~4Pc*<7(bxmo`VHBgHJVx*k@C(i$66nKyk
z@57H_fT!)4!!J^iHNcPHUc+L0ytQbKK4|X>+&I=^S?NDZ^p^=$!%|VeICKg<uCIH}
z4ip47@@RhOY-hY3co~KbvYcQD19{Z?EqhxvT@dU)*_qjG8A|2k=S={*6)mt+HDY#C
zD$84^B4qpPh<C<joA}f#wjnPyL$9s30n2)`#E*eb0d_R-@uwG9X9D`8En}|D7cd`b
zKyL)8CZg@A>7^^nZyjn79;#}OUxV$D4Q5_-h}%_hLc;4O(29J;{N2W*gQ_yyCE$2m
z+Idb!+OhQ)fvmm){ybY8GV77KI&kk6z#d(IfsSCJfPCb$DNb*kQvQmBSE^qsR;n8S
zNp^WH4rk$bdT{uSP_gx;%Xn458$X0nC+#w?A!x9SEi05ZEQ<9PEo%ix)rv*@{z=MY
zI3wdyQ1FR!8z6*hGEJLBdD}D=rZSIu6fl9!sEbqO9|Y5Y?IQnAo^iB0aaxLPVg${h
zZ0iH%W{d+^3i7$dHvhd{f;mYO`Q@c#J{qziZ#vnjfd|1qd*2oovb)N|wSixUxhu5o
zHb!vo1@65U))PcZ4EJ7SfE`W$r*`%Koe}<japmYcVhFms6P7v7;p1nl0sG4#1sPT8
JN=cL8{{f;QsoMYm

literal 0
HcmV?d00001

diff --git a/dmp-frontend/src/app/ui/auth/login/img/openaire_small.png b/dmp-frontend/src/app/ui/auth/login/img/openaire_small.png
new file mode 100644
index 0000000000000000000000000000000000000000..b4c2a3df3a048155cd154081eecb09d468c51001
GIT binary patch
literal 2883
zcmV-J3%vA+P)<h;3K|Lk000e1NJLTq001}u001}$1^@s6sD?Wp000XLNkl<ZXo2lo
zeOOdg9)8cgckT?s2qUtH^u!V>;up4R8h(bgX=&Q#XQq<6re>z-qoqb^s3?`7xaC&s
zBAWQ!K4q?bs4HS9TS`EPNQA9Bpb{a>=lwWm|4?vd038P0_SuK`dFGk9=lp)Z^S<}o
zdp>?=2>wSfI>{6XAdXUuP#MAiP@Y36NALxJ<j<Celz9`Ev?52ZkbBvV*Y;H{krX5V
z&^Km7fND{|E1xb4dB3^we|3SQlT5G5DiZH*$sh`3&f#StA2ugG=Pj}3;`R8$#_+J!
z;o)Jc!&8z^7y)4H+vOu<73<t>H9WvKU`8M*cyD}i`Gd`A_n!6O+&LM-$&)2x06ZZ{
z>IeW`+)RppJ9(m@F}4qP_g(&!5j9qdZO3XF#1(j?A6Xs}>nV>`@4@WsAJMb>x_QTr
z6<?Ml^<zm=UqC}~Ac7Df`1v;w2LMJr2cvJ})KrSG>8BbBZwi9PmL8x_@5Im<({}Dq
zRr<)?Y&HJ=Alz*c?Q{f>^zZ>8z;FCGw9^rc?WYH&z?b<pI1~l|U<}6WOZE@|CQmrE
zn!w&Y*Y`4;9bYnr;5(REZ++_t&%0EFv==ZX+5kd;b~+A>0aK!Rs1!I?=78xJwchqh
zm8$cUSF5~(eR?N`na$E!##oR`a00U+@ViBk-`}s_{W)pr(`x`AcKS|ZnN>SN+keQx
z#^SA?9Do`d#fDF+8>?2P4Keu780u$jtkNAV?!lR{JH=C{O82^p<9U*$(eSZ_MX!|t
zK>qi)>vrs%UJc;T$o{6E7!c|nlQ9Oy8gGy1kn5>9pcMw0?Ci3|l(GRXBzW%q1uqR7
zUMH?8XaxMZvGR;;3l9C$(v(}HK24!T0*4Jr(aW;B)VYih@>T!-_b*r+7envnuNS#3
z9Kkp4<puweaH&FWNR}Y8_x)meb2zq0U`0jEEXLscXqr2AG(4BFcc$Wr|Gq`RW}`1R
zjsSP;X#n5|@_e;qT+-A)sW}{5B#;nHbiNh@?!&LoEWOs87<(25o9+wX`v@F10I)YO
zVAQS^5FcRRq7TM(YIM}OBgf`C)FCDLxUgk&W-WmFA=}?y7k&P_SI>AG^YQg2J*uzG
zsx0~;l`%l6se%39SF8&b4Dnwa7vs@W;SR5RFzv57p>Prhz#RMhzy|MAbMVE=5bKkj
ze%V%?mv6q2pAXCB%TN_nzjx2M1|zMf@LHh5p#-`W6?l7>opCEhp>tVvwavXPkKwgI
zUf|q)TP)5AE&~b25wCfA?P#?~?k{{qO7aPB!_^}t`2+_b!nw?5lbb!b)WK_kFE1MY
z69DJAE@<E0a}iD1dx``5b0YwksYkihmRImv;NrL#E6;NU&SjOAmZ!aqSBLA@YsWfY
z^E@eB92ev9(##z#ng@BF9C5y;j4c=(y~*R1zB~H&P0~@y7C4u29Cz5;ct8sU8VuTG
zI1LC?WucXomIf&ZPf=UzSf{GYc}kE11ARBQgd=}<lcr%R|I!lJVMIs9ZZEbeWzn62
ze}DCQ<?&|Ci9Ncnn<qIGmzyI9+<UosuO4U##}@A<{QY(72!YG;%x;%cBO?;l#7<8a
z@8&-<c9$5@<;?`UO-^+#Cj{3F2CdgmLw%f<1^|HGJ=YJiSfrD1+h6iLDG>yIO-xLe
z1MhB|;<C<sasFQ2v9B&ppp?C#s>~&4LkJWfA8~j=;mWUD%B|J1YF)zDOr@0l1+L4t
zn~e}igpfR)PGbT9yIl@pj72eq#(LPwab$K$=^J}mgIBAj4f{kTjxyIeG8lu=D>4Mt
z27~t5@A6k1Z7oi%nl}6{Z^hAo0N<`WPqsJLm*>g$&Yc6hwx&4X9wvT!_go((N$MO`
zrB71I8qI%l94X~_?uaPzALM_(GVfmS_^+HzjCpcfkjZqTONS1=Mh2kjXG?WRh=0l9
zBlDWIIc`H6{tr?A4n7#QVUW!xjVFWzsVc4Dd2WAEaeU6bCh$yhd8Eb8W)JM5UG?U~
z4)yEWQ5#Ilc@E!vwmjtc#LX2`cyfD>NExV2q9sOO{_xHhJDMkNsfZ-NB=^_~WjO)>
zL`EcRtf{dt5d`jtEUN{Az&$8Q>gmXcgruV4_*M5(pj~G1448VZ%<(ON`pKO#Y$Ob6
z0FK|V(o_Hq(iYch)Vx<RD*K%;bIbwA68CzJ;E>S0+uG+H4&^1I(P!wn+*j%|Vo|*k
zM_4S5&m$ue&K4ENe{wIx{b5siFN=ds0Z^@|Sm-R!9qn}F@WHrFPXR#ssTyJTY4cl@
zVR3P}Jgn|P96vyRpH3u|bv^_{5*TB1M3GN-76$-%1uKqs?Y!oYqR`o$A6T6!2>d)>
zU-5v&;+V-81f5Qkkyo%H7XSu6^mb@fm31~_%&5}|e=jIpbrb*|>i3qP+3c9*a421M
zI^pd67l-a%`10`j+>JwK^9fL+6UjoG#CA?dDUUj^xYJ$d!x=;Ul#v@u7j9kFpX>XG
zoHS#opG!VRkY%+On#lL7D*ITc6V}=7O1LbmiM6%%SdJqf5JI|{&5pA@yRRFp)e6?i
zO7mHbhTl#pF4%1HjvkR~SG+KHaN5??%u|dpPOld~v09~#sasBt1~3@_7N%YIyI3wi
z&k<}NKfrhQM_J}IW;;s+FuE}=HktK*`knHF06-ZyyUZQ~P^H(BOpAlX0Kl#+^N)`w
z-aIzs2&yQ<?>It;BnW(?yKq8aP*qlcM>HCK(Zx%zZ@PFXey&z4>~T1hWp=x~kmtD)
zNm6$x3e6#eY^0Pe+>v&62&Jq?hYr4v78I^r<>RB7s3>&8poiZH0)WzM@=E~pJcrMB
zWtl^H4o4}&s7aeE8k`0LfJz})B^F?nSb$w-4>Q1E(2;Q;EeNhZ?iD!f0gwhDjR9$3
zs1X3<P)eTw;PMxZ?Cc*gW7^JGLQp@FjvUoJx3K8uZ>?6yS5-PwRau#;vT#x4Go0Kj
zZrrd30=Sm*&9Z9%V6(|r0B{u*wL$Uwey+(Wb;JRHtm0DuP;RBK%yv2-fXjgn02s97
zOx-&;I>|IaR<YkMvjG6I>TISAGOU;})UVRnkJITi36!!?-Mg(_c`Idyl;jiK%-CHC
zs!9iFH2lUo<Ij&?7*qG#Y<4`s7|SFC1w2nm=FK0{t*AJ@n~#rXu(MBNI9KMF$`}H9
z4yyn*zV1T^j;j>2CZv=H-N}D)wBZoXp;%F|bn4cM`YqR)OZLbA`2N)~b)V_)UX2n8
z3Rj-#-fiu3lB9f)y5;2T@UYdTTT?S57-OO+^5gTrUs)I)wz@9>FoyZvx+aWdjD@Ny
z4b$tzIfM|&Y<4`eH8t~O=Lgml)z&&jaU4nKd2(J=Z=Yi7bON>86#$?L#dwaOEGkq?
z+W2f>{h;&oJLRQTiJezeJVOA9v75<c0#KFR&i%|7>PN>UnKrAypX@RlMgThlP;yoI
z$oWPP0+Rp$7cRbbXvm=CBh}T`VOFag?CUF<+PBwd{UdXc%PxG{^#0>Ac7NMfQK=Zz
z(f@eX>9}eDm^XJ%&r_K{JZ7`W0l~q3n@?viDIE0hCcV`vjjQwhaQkyV&6~R?X4b5M
zMW+Z^N&v}O902@nX{X#tn=6J3Jn~e^&b9O5t^k0KNJjf;h|8llDcZ2@P>!YKfgnw$
zsY?0UDzQ(A+xE{rmC_`_!&dhV4_nPrl23SjM(}IFqYbZ4r>O*3mMHS(drhbfZD>Oq
h+R%nJw4n`k_zwgyj|v)U3%mdT002ovPDHLkV1oTKdmaD)

literal 0
HcmV?d00001

diff --git a/dmp-frontend/src/app/ui/auth/login/login.component.html b/dmp-frontend/src/app/ui/auth/login/login.component.html
index da8ce40e0..5b3511141 100644
--- a/dmp-frontend/src/app/ui/auth/login/login.component.html
+++ b/dmp-frontend/src/app/ui/auth/login/login.component.html
@@ -28,6 +28,10 @@
 						<span class="orcidIconMedium"></span>
 						<!-- <span></span> -->
 					</button>
+					<button *ngIf="hasOpenAireOauth()" class="openaire-button" mat-icon-button (click)="openaireLogin()" class="login-social-button">
+						<span class="openaireIcon"></span>
+						<!-- <span></span> -->
+					</button>
 				</div>
 			</div>
 		</div>
diff --git a/dmp-frontend/src/app/ui/auth/login/login.component.scss b/dmp-frontend/src/app/ui/auth/login/login.component.scss
index 0ec524671..af54ca616 100644
--- a/dmp-frontend/src/app/ui/auth/login/login.component.scss
+++ b/dmp-frontend/src/app/ui/auth/login/login.component.scss
@@ -191,6 +191,16 @@ span.orcidIconMedium {
   margin-right: 2em;
 }
 
+span.openaireIcon {
+  background: url(img/openaire_small.png) no-repeat;
+  background-position: center;
+  float: right;
+  width: 100px;
+  height: 56px;
+  margin-left: 2em;
+  margin-right: 2em;
+}
+
 .b2access-button {
   margin-top: 10px;
   width: fit-content;
@@ -201,6 +211,11 @@ span.orcidIconMedium {
   width: fit-content;
 }
 
+.openaire-button {
+  margin-top: 10px;
+  width: fit-content;
+}
+
 .login-logo {
   background: url(img/open-dmp.png) no-repeat;
   width: 273px;
diff --git a/dmp-frontend/src/app/ui/auth/login/login.component.ts b/dmp-frontend/src/app/ui/auth/login/login.component.ts
index c15aced02..6c329587e 100644
--- a/dmp-frontend/src/app/ui/auth/login/login.component.ts
+++ b/dmp-frontend/src/app/ui/auth/login/login.component.ts
@@ -58,6 +58,10 @@ export class LoginComponent extends BaseComponent implements OnInit, AfterViewIn
 		this.router.navigate(['/login/external/orcid']);
 	}
 
+	public openaireLogin() {
+		this.router.navigate(['/login/openaire']);
+	}
+
 	public hasFacebookOauth(): boolean {
 		return this.hasProvider(AuthProvider.Facebook);
 	}
@@ -82,6 +86,10 @@ export class LoginComponent extends BaseComponent implements OnInit, AfterViewIn
 		return this.hasProvider(AuthProvider.ORCID);
 	}
 
+	public hasOpenAireOauth(): boolean {
+		return this.hasProvider(AuthProvider.OpenAire);
+	}
+
 	public initProviders() {
 		if (this.hasProvider(AuthProvider.Google)) { this.initializeGoogleOauth(); }
 		if (this.hasProvider(AuthProvider.Facebook)) { this.initializeFacebookOauth(); }
@@ -102,6 +110,7 @@ export class LoginComponent extends BaseComponent implements OnInit, AfterViewIn
 			case AuthProvider.Twitter: return this.hasAllRequiredFieldsConfigured(environment.loginProviders.twitterConfiguration);
 			case AuthProvider.B2Access: return this.hasAllRequiredFieldsConfigured(environment.loginProviders.b2accessConfiguration);
 			case AuthProvider.ORCID: return this.hasAllRequiredFieldsConfigured(environment.loginProviders.orcidConfiguration);
+			case AuthProvider.OpenAire: return this.hasAllRequiredFieldsConfigured(environment.loginProviders.openAireConfiguration);
 			default: throw new Error('Unsupported Provider Type');
 		}
 	}
diff --git a/dmp-frontend/src/app/ui/auth/login/login.module.ts b/dmp-frontend/src/app/ui/auth/login/login.module.ts
index de4b22391..8eaa9ba92 100644
--- a/dmp-frontend/src/app/ui/auth/login/login.module.ts
+++ b/dmp-frontend/src/app/ui/auth/login/login.module.ts
@@ -9,6 +9,7 @@ import { LoginService } from './utilities/login.service';
 import { B2AccessLoginComponent } from './b2access/b2access-login.component';
 import { OrcidLoginComponent } from './orcid-login/orcid-login.component';
 import { EmailConfirmation } from './email-confirmation/email-confirmation.component';
+import { OpenAireLoginComponent } from "./openaire-login/openaire-login.component";
 
 @NgModule({
 	imports: [
@@ -22,7 +23,8 @@ import { EmailConfirmation } from './email-confirmation/email-confirmation.compo
 		TwitterLoginComponent,
 		B2AccessLoginComponent,
 		OrcidLoginComponent,
-		EmailConfirmation
+		EmailConfirmation,
+		OpenAireLoginComponent
 	],
 	providers: [LoginService]
 })
diff --git a/dmp-frontend/src/app/ui/auth/login/login.routing.ts b/dmp-frontend/src/app/ui/auth/login/login.routing.ts
index 88c7fc0b4..e1bec1f77 100644
--- a/dmp-frontend/src/app/ui/auth/login/login.routing.ts
+++ b/dmp-frontend/src/app/ui/auth/login/login.routing.ts
@@ -6,6 +6,7 @@ import { LinkedInLoginComponent } from './linkedin-login/linkedin-login.componen
 import { LoginComponent } from './login.component';
 import { OrcidLoginComponent } from './orcid-login/orcid-login.component';
 import { TwitterLoginComponent } from './twitter-login/twitter-login.component';
+import { OpenAireLoginComponent } from "./openaire-login/openaire-login.component";
 
 const routes: Routes = [
 	{ path: '', component: LoginComponent },
@@ -14,7 +15,8 @@ const routes: Routes = [
 	{ path: 'external/orcid', component: OrcidLoginComponent },
 	{ path: 'external/b2access', component: B2AccessLoginComponent },
 	{ path: 'confirmation/:token', component: EmailConfirmation },
-	{ path: 'confirmation', component: EmailConfirmation }
+	{ path: 'confirmation', component: EmailConfirmation },
+	{ path: 'openaire', component: OpenAireLoginComponent}
 ];
 
 @NgModule({
diff --git a/dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.html b/dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.html
new file mode 100644
index 000000000..e69de29bb
diff --git a/dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.ts b/dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.ts
new file mode 100644
index 000000000..14754d688
--- /dev/null
+++ b/dmp-frontend/src/app/ui/auth/login/openaire-login/openaire-login.component.ts
@@ -0,0 +1,61 @@
+import { Component, OnInit } from "@angular/core";
+import { BaseComponent } from "../../../../core/common/base/base.component";
+import { ActivatedRoute, Router, Params } from "@angular/router";
+import { LoginService } from "../utilities/login.service";
+import { AuthService } from "../../../../core/services/auth/auth.service";
+import { HttpClient } from "@angular/common/http";
+import { takeUntil } from "rxjs/operators";
+import { environment } from "../../../../../environments/environment";
+import { AuthProvider } from "../../../../core/common/enum/auth-provider";
+
+@Component({
+	selector: 'app-openaire-login',
+	templateUrl: './openaire-login.component.html',
+})
+export class OpenAireLoginComponent extends BaseComponent implements OnInit {
+	private returnUrl: string;
+
+	constructor(
+		private route: ActivatedRoute,
+		private loginService: LoginService,
+		private authService: AuthService,
+		private router: Router,
+		private httpClient: HttpClient
+	) {
+		super();
+	}
+
+	ngOnInit(): void {
+		this.route.queryParams
+			.pipe(takeUntil(this._destroyed))
+			.subscribe((params: Params) => {
+				const returnUrlFromParams = params['returnUrl'];
+				if (returnUrlFromParams) { this.returnUrl = returnUrlFromParams; }
+				if (!params['code']) { this.openaireAuthorize(); } else { this.openaireLoginUser(params['code'], params['state']) }
+			})
+	}
+
+	public openaireAuthorize() {
+		window.location.href = environment.loginProviders.openAireConfiguration.oauthUrl
+			+ '?response_type=code&client_id=' + environment.loginProviders.openAireConfiguration.clientId
+			+ '&redirect_uri=' + environment.loginProviders.openAireConfiguration.redirectUri
+			+ '&state=' + environment.loginProviders.openAireConfiguration.state
+			+ '&scope=openid profile email';
+	}
+
+	public openaireLoginUser(code: string, state: string) {
+		if (state !== environment.loginProviders.openAireConfiguration.state) {
+			this.router.navigate(['/login'])
+		}
+		this.httpClient.post(environment.Server + 'auth/openAireRequestToken', { code: code, provider: AuthProvider.OpenAire })
+			.pipe(takeUntil(this._destroyed))
+			.subscribe((data: any) => {
+				this.authService.login({ ticket: data.payload.accessToken, provider: AuthProvider.OpenAire, data: null })
+					.pipe(takeUntil(this._destroyed))
+					.subscribe(
+						res => this.loginService.onLogInSuccess(res, this.returnUrl),
+						error => this.loginService.onLogInError(error)
+					);
+			});
+	}
+}
diff --git a/dmp-frontend/src/environments/environment.ts b/dmp-frontend/src/environments/environment.ts
index ba3d6d89d..1e079ce43 100644
--- a/dmp-frontend/src/environments/environment.ts
+++ b/dmp-frontend/src/environments/environment.ts
@@ -8,7 +8,7 @@ export const environment = {
 	},
 	defaultCulture: 'en-US',
 	loginProviders: {
-		enabled: [1, 2, 3, 4, 5, 6, 7],
+		enabled: [1, 2, 3, 4, 5, 6, 7, 8],
 		facebookConfiguration: { clientId: '' },
 		googleConfiguration: { clientId: '' },
 		linkedInConfiguration: {
@@ -31,6 +31,12 @@ export const environment = {
 			clientId: 'APP-766DI5LP8T75FC4R',
 			oauthUrl: 'https://orcid.org/oauth/authorize',
 			redirectUri: 'http://localhost:4200/login/external/orcid'
+		},
+		openAireConfiguration: {
+			clientId: '',
+			oauthUrl: '',
+			redirectUri: '',
+			state: '987654321'
 		}
 	},
 	logging: {