bookwyrm-social/bookwyrm

SSO support (OAuth2/OIDC, LDAP)

Open

#2,379 opened on Nov 15, 2022

View on GitHubContributor guide
 (5 comments) (15 reactions) (0 assignees)Python (326 forks)auto 404
enhancementhelp wanted

Repository metrics

Stars
 (2,754 stars)
PR merge metrics
 (PR metrics pending)

Description

Is your feature request related to a problem? Please describe. Managing users for a server which provides multiple services (Mastodon, Matrix, bookwyrm) gets tedious without a central user store. This can be solved by using exactly that and simplifying login using SSO.

Describe the solution you'd like It would be nice to be able to Sign in (and create if needed) users using the OpenID Connect standard.

Describe alternatives you've considered Alternatively, backing the user store using LDAP could be an option, but is less preferred because a proper SSO solution can be more secure (2FA) and streamlined.

Contributor guide

Research direction
Investigate integration of OAuth2/OIDC providers using Django packages like django allauth or python social auth. Review existing authentication flow in Bookwyrm and identify where to add SSO login buttons and callback endpoints.
Tech stack
python
Domain
backendauthentication
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
PythonDjangoOAuth2/OIDC basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40