search

lbr38 / repomanager

A web UI to mirror rpm or deb packages repositories.
GNU General Public License v3.0
50 stars 7 forks source link

Feature Request: SSO Support #120

Open rolffujino opened 8 months ago

rolffujino commented 8 months ago

Please look into supporting SSO through SAML, Oauth 2.0 or OpenID Connect.

lbr38 commented 8 months ago

Hi

It's a good feature but don't expect it to be prioritized because I don't know how to develop it and I don't have any environment allowing me to test and debug SSO locally.

rolffujino commented 8 months ago

@lbr38, fyi you can sign up for free as an Okta developer for free and test/develop SSO.

I am personally going to try to follow this document to see if I can't build it out myself: https://developer.okta.com/blog/2019/08/30/php-authorization-oauth-2-okta

Unfortunately it might take me a while, since yesterday was the first time I have programmed in PHP and I am not a programmer by trade (system engineer).

hac3ru commented 7 months ago

If I may: I guess that for most people even LDAP support would be a huge plus. Plus, LDAP support should be easier to achieve than SSO.

lbr38 commented 7 months ago

I understand that it's a highly requested feature, but implementing SSO/LDAP mechanisms in code is complex.

I consider it a "nice to have" rather than a "must-have." This doesn't prevent you from using the product.

Furthermore, implementing a new authentication method can introduce security vulnerabilities if not handled properly.

I believe it will be implemented sooner or later, but for now I prefer to dedicate the limited available time that I have to improving the existing and fixing bugs.

hac3ru commented 7 months ago

Totally understandable. This looks like a really cool software but it needs more work. I would also love to be able to cancel a running job (I deployed in a container, restarted the container and the jobs didn't resume, they were just stuck in progress, without actually downloading).

FalconXC4 commented 5 days ago

Hi, I would also be interested in the LDAP authentication feature. As we are using the product in a professionnal environnement we need to be able to manage credentials through LDAP. We hope you will be able to add the feature soon :)