Oauth (via socialite)

[Boy132]

https://laravel.com/docs/11.x/socialite
https://socialiteproviders.com/

• Backend (Add OAuth backend #386)
• Frontend (Add Oauth frontend and backend improvements #718 & feat: Client UI translate to Filament (from React) #416)
• Add more providers (e.g. authentik, google, microsoft, steam) (Add Oauth frontend and backend improvements #718)
• Make it easier to add additional providers (without code edit) (Add Oauth frontend and backend improvements #718)

[KeyTerminal]

Would be nice to see an option for JIT(Just-In-Time) provisioning added to create users upon sign-in via SSO.

[timoschirmer]

Would love to see support for authentik or some kind of generic oauth2 provider in the future.

[KeyTerminal]

Would love to see support for authentik or some kind of generic oauth2 provider in the future.

Authentik is already supported see here https://socialiteproviders.com/Authentik/#installation-basic-usage
just gotta make some changes to get it working.

[KeyTerminal]

Would be nice to see enforce MFA as an option as well.

Using the amr attribute within the OAuth token contains the types auth the user has completed
at the identity provider, an example:
"amr": [
"pwd",
"mfa"
],

You could use this to add an option to enforce MFA which would deny the login if the amr token doesn't contain "mfa".

[phoenix-limited]

Would love to see support for authentik or some kind of generic oauth2 provider in the future.

Authentik is already supported see here https://socialiteproviders.com/Authentik/#installation-basic-usage just gotta make some changes to get it working.

I've followed the couple things listed there, what else needs done to enable logging in with authentik? I'm really not seeing anything else for it

[Boy132]

Would love to see support for authentik or some kind of generic oauth2 provider in the future.

Authentik is already supported see here https://socialiteproviders.com/Authentik/#installation-basic-usage just gotta make some changes to get it working.

I've followed the couple things listed there, what else needs done to enable logging in with authentik? I'm really not seeing anything else for it

Currently only the backend for oauth works, there is no frontend yet. So you can't use it yet.

[phoenix-limited]

Currently only the backend for oauth works, there is no frontend yet. So you can't use it yet.

I see. Would love to get this working, but I doubt I'll be of any help. I'll happily be a test-bed when time come though