TandoorRecipes/recipes

Richer reverse proxy authentication

開放

#1,134 建立於 2021年12月13日

 (7 則留言) (4 個反應) (0 位負責人)HTML (500 個分叉)batch import
enhancementgood first issueinfrastructure

倉庫指標

星標
 (4,470 顆星)
PR 合併指標
 (平均合併 33天 23小時) (30 天內合併 18 個 PR)

描述

Is your feature request related to a problem? Please describe.

Being able to use Authelia SSO without much fuss is great, but unfortunately the only piece of user information that recipes grabs right now is the HTTP_REMOTE_USER, which makes it hard to use the built in invite system!

Furthermore, the logout link is hard coded and cannot be overridden with an environment variable. This prevents being able to use an SSO logout url e.g. https://authelia.example.com/logout

Describe the solution you'd like

  1. Add support for other header fields like:
  • HTTP_REMOTE_NAME
  • HTTP_REMOTE_EMAIL
  1. Update this information as required when a user logs in e.g. their email address has changed.

  2. Add an environmental variable REVERSE_PROXY_AUTH_LOGOUT to specify a custom logout URL.

Describe alternatives you've considered I guess I could manage users in Recipes as well as in Authelia, but that means double-handling of information for my use case.

貢獻者指南