TandoorRecipes/recipes

Richer reverse proxy authentication

Aberta

#1.134 aberto em 13 de dez. de 2021

 (7 comentários) (4 reações) (0 responsável)HTML (500 forks)batch import
enhancementgood first issueinfrastructure

Métricas do repositório

Stars
 (4.470 estrelas)
Métricas de merge de PR
 (Mesclagem média 33d 23h) (18 fundiu PRs em 30d)

Description

Is your feature request related to a problem? Please describe.

Being able to use Authelia SSO without much fuss is great, but unfortunately the only piece of user information that recipes grabs right now is the HTTP_REMOTE_USER, which makes it hard to use the built in invite system!

Furthermore, the logout link is hard coded and cannot be overridden with an environment variable. This prevents being able to use an SSO logout url e.g. https://authelia.example.com/logout

Describe the solution you'd like

  1. Add support for other header fields like:
  • HTTP_REMOTE_NAME
  • HTTP_REMOTE_EMAIL
  1. Update this information as required when a user logs in e.g. their email address has changed.

  2. Add an environmental variable REVERSE_PROXY_AUTH_LOGOUT to specify a custom logout URL.

Describe alternatives you've considered I guess I could manage users in Recipes as well as in Authelia, but that means double-handling of information for my use case.

Guia do colaborador