No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks

#3 Security Audit of auth

python-support/python-support-infra

Reference: python-support/python-support-infra#4

so-rose commented

2023-08-13 20:07:10 +02:00

Owner

Deploy first-step stack:

Write stack
Write playbook

Blueprints for Flows:

Authentication: Via SSO
- Remember to configure sources in the default login page: https://goauthentik.io/integrations/sources/general
Authorization: Explicit
Authorization: Implicit
Invalidation: Logout
Invalidation: Logout

Write blueprints for:

Invitation-based demo
Setup of DTU SSO Backend (via SAML): https://goauthentik.io/integrations/sources/saml/

Setup Providers + Applications via API:

chat: https://goauthentik.io/integrations/services/zulip/
- See chat stack for a working config.
git: https://docs.gitea.com/administration/config-cheat-sheet#oauth2-client-oauth2_client
- Need to use gitea admin auth add-oauth
uptime: https://goauthentik.io/integrations/services/uptime-kuma/
- We disable auth & use Proxy Provider.

Reference

See blueprint schemas:

Schema: https://goauthentik.io/blueprints/schema.json
Examples (try them!): https://git.sudo.is/mirrors/authentik/src/branch/main/blueprints/default
Official Docs: https://goauthentik.io/developer-docs/blueprints/v1/structure
https://lyz-code.github.io/blue-book/authentik/#use-blueprints

Deploy first-step stack: - [ ] Write stack - [ ] Write playbook Blueprints for Flows: - [ ] Authentication: Via SSO - Remember to configure sources in the default login page: https://goauthentik.io/integrations/sources/general - [ ] Authorization: Explicit - [ ] Authorization: Implicit - [ ] Invalidation: Logout - [ ] Invalidation: Logout Write blueprints for: - [ ] Invitation-based demo - [ ] Setup of DTU SSO Backend (via SAML): https://goauthentik.io/integrations/sources/saml/ Setup Providers + Applications via API: - [ ] chat: https://goauthentik.io/integrations/services/zulip/ - See chat stack for a working config. - [ ] git: https://docs.gitea.com/administration/config-cheat-sheet#oauth2-client-oauth2_client - Need to use `gitea admin auth add-oauth` - [ ] uptime: https://goauthentik.io/integrations/services/uptime-kuma/ - We disable auth & use Proxy Provider. # Reference See blueprint schemas: - Schema: https://goauthentik.io/blueprints/schema.json - Examples (try them!): https://git.sudo.is/mirrors/authentik/src/branch/main/blueprints/default - Official Docs: https://goauthentik.io/developer-docs/blueprints/v1/structure - https://lyz-code.github.io/blue-book/authentik/#use-blueprints

so-rose added the

label

so-rose added this to the Minimal Complete Infrastructure project

2023-08-13 20:29:02 +02:00

so-rose added this to the v0.2.0 milestone

2023-08-13 20:34:01 +02:00

so-rose added a new dependency

2023-08-21 12:40:03 +02:00

Rows
Columns

Deploy auth #4

Reference