OIDC/SSO/Oauth2 support

dahlia / hollo

Federated single-user microblogging software

https://docs.hollo.social/

GNU Affero General Public License v3.0

236 stars 16 forks source link

OIDC/SSO/Oauth2 support #69

Open SadmL opened 1 week ago

SadmL commented 1 week ago

Does Hollo has OIDC/SSO/Oauth2 support? Can't find any info about it. I understand that project/software single-user first, but...

~~If not implemented and not interested in, feel free to close this issue.~~

dahlia commented 1 week ago

It's not implemented yet, but it is on our roadmap.

ThisIsMissEm commented 1 week ago

What would the goal of OIDC for SSO be? Hollo would still need to be an OAuth 2 authorization server to implement the Mastodon API (which isn't a specification but an implementation)

Typically SSO only makes a tonne of sense in environments where you support multiple users, otherwise it's just a whole heap of security attack surface.

SadmL commented 1 week ago

Just wanted single (almost) click login 🙃 I'm using Nextcloud as OIDC issuer via https://github.com/H2CK/oidc. Currently using GoToSocial that has OIDC support, just wanted to try Hollo, but I'll wait when this would implemented (no rush)