search

tobychui / zoraxy

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!
https://zoraxy.arozos.com
GNU Affero General Public License v3.0
2.46k stars 139 forks source link

[ENHANCEMENTS] Multi account accès webmin page #89

Open barto95100 opened 7 months ago

barto95100 commented 7 months ago

Not possible to create multi user account to manage/configure zoraxy

it's possible or it's necessary the specified configuration ?

tobychui commented 7 months ago

@barto95100 Zoraxy is not designed to use in multi-admin user scenario. If you need such feature, you need another authentication gateway in front of it or seek for a more professional solution. Actually I am waiting for someone to contribute a third party authentication API access like the one mentioned in #33 which might also solve your issue with multiple admin accounts. But so far no one want to work on it yet.

artenais commented 4 months ago

@tobychui I second this, even if I understand this is not the scoop of the project. The code seems very clean, so I think a mysql DB could be implemented with some time off. Forwarding auth will solve the auth problem but seem not really air tight? I read on the website there is plugin support, is there any doc about that?

tobychui commented 4 months ago

@artenais

I think a mysql DB could be implemented with some time off.

You don't need to link external DB for that. In fact Zoraxy user system support multi-users as it is a fork from ArozOS user system which support complex multi-user-multi-group structure. I guess the reason why Zoraxy do not support multi-admin is due to writing UI is troublesome.

I read on the website there is plugin support, is there any doc about that?

Not yet. I tried to implement a plug system with JavaScript interpreter and it turns out to be a bit slower than expected. I am still thinking what might be the possible implementation that won't effect the performance too much and user do not need to recompile Zoraxy when installing new plugins.

wmantly commented 3 months ago

Just found this project, and might contribute by adding LDAP auth support.

GamingForLive commented 2 months ago

@wmantly If you do that would be great maybe you could sneak some form of sso in there too 😉

barto95100 commented 2 months ago

and authentik 🫣

Tacioandrade commented 2 months ago

I guess the reason why Zoraxy do not support multi-admin is due to writing UI is troublesome.

At this point I believe that one possibility is that there is no differentiation of user levels, such as Super admin, admin, user, report, etc.

At least initially, it would be possible to support multiple users, but all as administrators, with the same interface.

The advantage of multi-user is that there is no need to share the password between multiple users, for example.

Furthermore, in the future, it would be possible to have a log tool, where each change made by a user, the user, time and modification (in a generic way, such as changing the port or creating a proxy) would be logged for auditing, for example.