search

seanmorley15 / AdventureLog

Self-hostable travel tracker and trip planner.
https://adventurelog.app
Other
593 stars 15 forks source link

[REQUEST] Implement OIDC authorization flow #350

Open winston0410 opened 1 month ago

winston0410 commented 1 month ago

Is your feature request related to a problem? Please describe. I would like to authorize user with external IDP and giving them access to AdventureLog without registering again.

Describe the solution you'd like Adventurelog to support basic OIDC authorization flow. It doesn't have to be PKCE, the basic flow with client id and client secret should solve the problem

Describe alternatives you've considered SAML and LDAP. These two approaches are more complex, and OIDC is more modern

Additional context Add any other context or screenshots about the feature request here.

Aesgarth commented 1 week ago

I'd love to see this too

seanmorley15 commented 1 week ago

I am looking into this right now! I want to actually revamp the auth system first, this would mean moving from the current auth system (dj-rest-auth) which is limited to basically just signup and registration, to allauth which has a lot more features like MFA and ODIC (also will make it easier to support a future AdventureLog mobile app 🤫)