[X] There are no open or closed feature requests that are related to this request
Description
I would like Plant-it to accept authentication from additional sources, such as forwarded proxy headers (X-Forwarded-User, X-Forwarded-Email, etc.), or maybe OAuth/OIDC but I know that is a larger effort and I'm not sure that whole flow is entirely necessary for this application.
This would allow Plant-it to offload the storage of authentication details to another service (it would still need to keep track of user data, though). SSO would be an option for environments that support it(!).
There would need to be a few additional configs for forwarded auth:
FORWARD_AUTH_ENABLED - true/false value which enables or disables the feature to accept forwarded authentication headers
FORWARD_AUTH_HEADER - string specifying the HTTP header used to pass the user id (i.e. X-Forwarded-User, X-Forwarded-Email, etc)
FORWARD_AUTH_TRUSTED_IP - a list of IPs to accept forwarded authentication from (i.e. from the IP of the incoming request); accept from any IP if it is empty/undefined
Avoid duplicated feature requests
Description
I would like Plant-it to accept authentication from additional sources, such as forwarded proxy headers (
X-Forwarded-User,X-Forwarded-Email, etc.), or maybe OAuth/OIDC but I know that is a larger effort and I'm not sure that whole flow is entirely necessary for this application. This would allow Plant-it to offload the storage of authentication details to another service (it would still need to keep track of user data, though). SSO would be an option for environments that support it(!).There would need to be a few additional configs for forwarded auth:
FORWARD_AUTH_ENABLED- true/false value which enables or disables the feature to accept forwarded authentication headersFORWARD_AUTH_HEADER- string specifying the HTTP header used to pass the user id (i.e.X-Forwarded-User,X-Forwarded-Email, etc)FORWARD_AUTH_TRUSTED_IP- a list of IPs to accept forwarded authentication from (i.e. from the IP of the incoming request); accept from any IP if it is empty/undefined