iv-org / invidious

Invidious is an alternative front-end to YouTube
https://invidious.io
GNU Affero General Public License v3.0
16.4k stars 1.84k forks source link

[feature] Add support for external authentication sources #705

Open Perflyst opened 5 years ago

Perflyst commented 5 years ago

Add support for auth against LDAP/OAuth/OpenID

omarroth commented 5 years ago

This seems quite out-of-scope to me. Is there a reason for preferring LDAP in particular? Would you mind providing an example use-case?

Perflyst commented 5 years ago

People don't have to create new accounts on each service. One account, one login on all services. As an admin you have the users central. Other apps like nextcloud, tinytinyrss or mastodon support LDAP too

PoGo606 commented 5 years ago

Same here, I try to let my users use the same account for all the provided services. LDAP is a great help for that ; at least for the authentication part : same login/pass accross all services.

HumanG33k commented 5 years ago

Agree too, several organisations want to migrate to their self-hosted services (nextcloud, email, website) and ldap is a key tech for that and with tools like fusiondirectory it’s "easy" now.

PipeItToDevNull commented 5 years ago

My use case is that I am a single user, but I host a lot of stuff and want to have one source for my authentication and credentials.

github-actions[bot] commented 3 years ago

This issue has been automatically marked as stale and will be closed in 30 days because it has not had recent activity and is much likely outdated. If you think this issue is still relevant and applicable, you just have to post a comment and it will be unmarked.

Perflyst commented 3 years ago

still relevant

unixfox commented 3 years ago

Please stop spamming this issue, if you really need LDAP support then you are free to submit a pull request with the code containing the LDAP support.

I apologize, but you are also abusing power. If you think this is a spam, it is my fault to communicate with you bureaucracy.

Apologizes accepted, but I'm just moderating this repository because we want to keep the issues clean from useless comments.

The developer that will implement your feature want to read useful comments, he doesn't want to spend extra time filtering the good comments from the bad comments. The time of open source developers is precious because they aren't getting paid, they are just volunteers.

Please keep in mind that we don't own you anything, we are spending our time on things that matter to us, so maybe no one is interested in LDAP and that's why it takes a long time to have this feature.

No need to reply to comment, you can just add a thumbs up if you agree.

yagarea commented 2 years ago

Is there any progress on this issue ?

unixfox commented 2 years ago

No, would you be interested to contribute in order to add this feature?

SamantazFox commented 2 years ago

Updated to take other authentication methods into account (pun not intended). See #3159

kkwpsi commented 3 months ago

Still relevant. It would be great if the implementation of this feature was tied to mandatory login. (#446). Currently you can use security like HTTP auth, but the HTTP auth login credentials are useless for the application itself. FreshRSS application has a solution for this: a user logged in via HTTP Auth becomes a user in the application itself.

BudgieBird commented 3 months ago

Agreed. If there was a way to implement the way Gitea does, that'd be 🔥