瀏覽代碼

OIDC/OAuth2 autologin settings for Docker/Snap/Source/Bundle platforms.

Thanks to xet7 !
Lauri Ojansivu 2 年之前
父節點
當前提交
284f440136
共有 7 個文件被更改,包括 29 次插入0 次删除
  1. 5 0
      Dockerfile
  2. 4 0
      docker-compose.yml
  3. 0 0
      snap-src/bin/config
  4. 6 0
      snap-src/bin/wekan-help
  5. 6 0
      start-wekan.bat
  6. 4 0
      start-wekan.sh
  7. 4 0
      torodb-postgresql/docker-compose.yml

+ 5 - 0
Dockerfile

@@ -50,6 +50,7 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
     TRUSTED_URL="" \
     WEBHOOKS_ATTRIBUTES="" \
     OAUTH2_ENABLED=false \
+    OIDC_REDIRECTION_ENABLED=false \
     OAUTH2_CA_CERT="" \
     OAUTH2_ADFS_ENABLED=false \
     OAUTH2_LOGIN_STYLE=redirect \
@@ -147,6 +148,10 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
     NODE_OPTIONS="--max_old_space_size=4096" \
     WRITABLE_PATH=/data
 
+#---------------------------------------------
+# == at docker-compose.yml: AUTOLOGIN WITH OIDC/OAUTH2 ====
+# https://github.com/wekan/wekan/wiki/autologin
+#- OIDC_REDIRECTION_ENABLED=true
 #---------------------------------------------------------------------
 # https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
 # Add more Node heap:

+ 4 - 0
docker-compose.yml

@@ -342,6 +342,10 @@ services:
       #-----------------------------------------------------------------
       # ==== Debug OIDC OAuth2 etc ====
       #- DEBUG=true
+      #---------------------------------------------
+      # ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
+      # https://github.com/wekan/wekan/wiki/autologin
+      #- OIDC_REDIRECTION_ENABLED=true
       #-----------------------------------------------------------------
       # ==== OAUTH2 ORACLE on premise identity manager OIM ====
       #- ORACLE_OIM_ENABLED=true

File diff suppressed because it is too large
+ 0 - 0
snap-src/bin/config


+ 6 - 0
snap-src/bin/wekan-help

@@ -214,6 +214,12 @@ echo -e "\t$ snap set $SNAP_NAME oauth2-enabled='true'"
 echo -e "\t-Disable the OAuth2 of Wekan:"
 echo -e "\t$ snap unset $SNAP_NAME oauth2-enabled"
 echo -e "\n"
+echo -e "OIDC/OAuth2 redirection to autologin, see https://github.com/wekan/wekan/wiki/autologin"
+echo -e "To enable the autologin of Wekan:"
+echo -e "\t$ snap set $SNAP_NAME oidc-redirection-enabled='true'"
+echo -e "\t-Disable the autologin of Wekan:"
+echo -e "\t$ snap unset $SNAP_NAME oidc-redirection-enabled"
+echo -e "\n"
 echo -e "Optional OAuth2 CA Cert, see https://github.com/wekan/wekan/issues/3299"
 echo -e "To enable the OAuth2 of Wekan:"
 echo -e "\t$ snap set $SNAP_NAME oauth2-ca-cert='ABCD134'"

+ 6 - 0
start-wekan.bat

@@ -128,6 +128,12 @@ REM SET WEBHOOKS_ATTRIBUTES=
 
 REM ------------------------------------------------------------
 
+REM ## ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
+REM ## https://github.com/wekan/wekan/wiki/autologin
+REM # SET OIDC_REDIRECTION_ENABLED=true
+
+REM ------------------------------------------------------------
+
 REM # OAUTH2 ORACLE on premise identity manager OIM
 REM SET ORACLE_OIM_ENABLED=true
 

+ 4 - 0
start-wekan.sh

@@ -137,6 +137,10 @@
       # Example: export WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
       export WEBHOOKS_ATTRIBUTES=''
       #---------------------------------------------
+      # ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
+      # https://github.com/wekan/wekan/wiki/autologin
+      #export OIDC_REDIRECTION_ENABLED=true
+      #---------------------------------------------
       # OAUTH2 ORACLE on premise identity manager OIM
       #export ORACLE_OIM_ENABLED=true
       #---------------------------------------------

+ 4 - 0
torodb-postgresql/docker-compose.yml

@@ -351,6 +351,10 @@ services:
       # example: WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
       #- WEBHOOKS_ATTRIBUTES=
       #-----------------------------------------------------------------
+      # ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
+      # https://github.com/wekan/wekan/wiki/autologin
+      #- OIDC_REDIRECTION_ENABLED=true
+      #---------------------------------------------
       # ==== OAUTH2 ORACLE on premise identity manager OIM ====
       #- ORACLE_OIM_ENABLED=true
       #-----------------------------------------------------------------

Some files were not shown because too many files changed in this diff