deluge: Use OpenID Connect instead of pubtkt based SSO

Tests:

- Functional tests work.

- Admin user is able to access the application

- User belonging to special group is able to access the application

- Regular user is not able to access the application

- Anonymous user is not able to access the application

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
Sunil Mohan Adapa 2025-11-24 08:56:57 -08:00 committed by James Valleroy
parent 4ab2007c99
commit af892adb5e
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808

View File

@ -8,10 +8,8 @@
## ##
<Location /deluge> <Location /deluge>
ProxyPass http://localhost:8112 ProxyPass http://localhost:8112
Include includes/freedombox-single-sign-on.conf Use AuthOpenIDConnect
<IfModule mod_auth_pubtkt.c> Use RequireGroup bit-torrent
TKTAuthToken "admin" "bit-torrent"
</IfModule>
## Send the scheme from user's request to enable Deluge to redirect URLs, ## Send the scheme from user's request to enable Deluge to redirect URLs,
## set cookies, set absolute URLs (if any) properly. ## set cookies, set absolute URLs (if any) properly.
RequestHeader set X-Forwarded-Proto 'https' env=HTTPS RequestHeader set X-Forwarded-Proto 'https' env=HTTPS