Add basic OIDC integration with locally setup Authentik#1805
Open
kmoy1 wants to merge 1 commit intowger-project:masterfrom
Open
Add basic OIDC integration with locally setup Authentik#1805kmoy1 wants to merge 1 commit intowger-project:masterfrom
kmoy1 wants to merge 1 commit intowger-project:masterfrom
Conversation
4 tasks
|
This looks like a draft for me. Under the assumption that the implementation is working: Sadly I lack the skills for web development and never worked with Django so far or I'd implement the changes myself. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
NOTE: Since this requires local manual setup of an OIDC IDP, this should not be merged into master but into its own branch (e.g. 'OIDC').
Addresses #1797
Proposed Changes
Please check that the PR fulfills these requirements
Other questions
(e.g. database migration)?
Yes. Users need to spin up an Authentik application of their own and then set these environment variables in the Django app (or hardcode them in settings_global.py: not recommended), values of which are provided by Authentik.
OIDC_RP_CLIENT_ID
OIDC_RP_CLIENT_SECRET
OIDC_OP_AUTHORIZATION_ENDPOINT
OIDC_OP_TOKEN_ENDPOINT
OIDC_OP_USER_ENDPOINT
OIDC_OP_JWKS_ENDPOINT
They also need to set
OIDC_RP_SIGN_ALGO=RS256