This implements optional SSO via OIDC for logging in and signing up (for the first admin sign up or if sign up is allowed). The most requested feature! Tested with Authentik and Google! It includes a new `SimpleCache` interface (in-memory, using [`caches`](https://developer.mozilla.org/en-US/docs/Web/API/Window/caches)) for storing the state and code challenges. Closes #13
20 lines
650 B
Plaintext
20 lines
650 B
Plaintext
PORT=8000
|
|
|
|
POSTGRESQL_HOST="postgresql" # docker container name or external hostname/IP
|
|
POSTGRESQL_USER="postgres"
|
|
POSTGRESQL_PASSWORD="fake"
|
|
POSTGRESQL_DBNAME="bewcloud"
|
|
POSTGRESQL_PORT=5432
|
|
POSTGRESQL_CAFILE=""
|
|
|
|
JWT_SECRET="fake"
|
|
PASSWORD_SALT="fake"
|
|
|
|
MFA_KEY="fake" # optional, if you want to enable multi-factor authentication
|
|
MFA_SALT="fake" # optional, if you want to enable multi-factor authentication
|
|
|
|
OIDC_CLIENT_ID="fake" # optional, if you want to enable SSO (Single Sign-On)
|
|
OIDC_CLIENT_SECRET="fake" # optional, if you want to enable SSO (Single Sign-On)
|
|
|
|
BREVO_API_KEY="fake" # optional, if you want to enable signup email verification
|