deluge: Use OpenID Connect instead of pubtkt based SSO

Tests:

- Functional tests work.

- Admin user is able to access the application

- User belonging to special group is able to access the application

- Regular user is not able to access the application

- Anonymous user is not able to access the application

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
Sunil Mohan Adapa 2025-11-24 08:56:57 -08:00 committed by James Valleroy
parent 4ab2007c99
commit af892adb5e
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808

View File

@ -8,10 +8,8 @@
##
<Location /deluge>
ProxyPass http://localhost:8112
Include includes/freedombox-single-sign-on.conf
<IfModule mod_auth_pubtkt.c>
TKTAuthToken "admin" "bit-torrent"
</IfModule>
Use AuthOpenIDConnect
Use RequireGroup bit-torrent
## Send the scheme from user's request to enable Deluge to redirect URLs,
## set cookies, set absolute URLs (if any) properly.
RequestHeader set X-Forwarded-Proto 'https' env=HTTPS