Kovah / LinkAce

LinkAce is a self-hosted archive to collect links of your favorite websites.
https://www.linkace.org
GNU General Public License v3.0
2.64k stars 164 forks source link

Support for Auth-Proxys like authelia (SSO) #331

Open TheFrazer opened 2 years ago

TheFrazer commented 2 years ago

In regard to the SSO issue #174 already open, I would like to add Auth-Proxys like authelia (GitHub) as an option. The requests get answered by the proxy that authenticates the user and adds X-Server headers to the request containing the username and email. The proxy then forwards the request to the application. LinkAce then only has to check for the presence of said header and check if a user with that username/email exists and automatically logs said user in.

So in summary LinkAce would have to do zero crypto/security and just skips authentication as long as the user in the header exists. If not it probably would be best to just fall back to the default authentication.

jk commented 2 years ago

In more general terms, OP wants LinkAce to support forward authentication. Besides authelia, there're quite a bunch projects like it: