FreedomBox/freedombox-single-sign-on.conf at 1d4289068a3e70a8cea09c63ac13d356b143a817 - FreedomBox - Gitea: Git with a cup of tea

nik/FreedomBox

mirror of https://github.com/freedombox/FreedomBox.git synced 2026-04-29 10:10:19 +00:00

Joseph Nuthalpati 995365f3df

Add SSO using auth_pubtkt for 3 web apps

- Install mod_auth_pubtkt and generate public/private key-pair.

- Redirect user to login page if no cookie is presented.

- Add check for authenticated user for login page.

- Temporarily switched to DSA because of a bug in mod_auth_pubtkt
  which causes it to accept only DSA and not RSA. Also had to use SHA1
  instead of SHA256.

- Enabled SSO for Syncthing, Repro and TT-RSS.

- Using tokens to authorize by user groups.

- Generate keys during first boot.

2017-06-03 10:29:42 -04:00

10 lines

299 B

Plaintext

Raw Blame History

 TKTAuthPublicKey /etc/apache2/auth-pubtkt-keys/pubkey.pem
 TKTAuthLoginURL /plinth/accounts/sso/login/
 TKTAuthBackArgName next
 TKTAuthDigest SHA1
 TKTAuthRefreshURL /plinth/accounts/sso/refresh/
 TKTAuthUnauthURL /plinth
 AuthType mod_auth_pubtkt
 AuthName "FreedomBox Single Sign On"
 Require valid-user