Feature Request: Access Token Authentication for Firefly III instances behind Keycloak/Authelia

victorbalssa / abacus

🟠 Abacus: Firefly III mobile application.

https://apps.apple.com/us/app/1627093491

GNU General Public License v3.0

525 stars 38 forks source link

Feature Request: Access Token Authentication for Firefly III instances behind Keycloak/Authelia #93

Closed victorbalssa closed 1 year ago

victorbalssa commented 1 year ago

implementing access token as a 2nd option for authentication.
Could Fix #89 and #90

paulcalabro commented 1 year ago

@victorbalssa Can you please confirm if these Authelia settings are required for this feature to work?

access_control:
  rules:
    - domain:
        - <domain_goes_here>
      resources:
        - ^/api/v1/.*$
      policy: bypass

victorbalssa commented 1 year ago

@paulcalabro I'm not familiar with any of Authelia/Keycloak, with Personal Access Token, you will have an Authorization header on all API calls to be authenticated. If you have other rules that needs to be bypassed, this settings makes sense.