feat: Add richer reverse proxy authentication support#4737
Open
Jbansal2 wants to merge 1 commit into
Open
Conversation
- Add HTTP_REMOTE_NAME and HTTP_REMOTE_EMAIL header support - Implement CustomRemoteUserBackend to auto-update user info on login - Add REVERSE_PROXY_AUTH_LOGOUT environment variable for custom SSO logout URLs - Update documentation with examples for Authelia/Authentik integration - Add comprehensive test suite for reverse proxy authentication - Maintain backward compatibility with existing setups Closes TandoorRecipes#1134
|
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Implements richer reverse proxy authentication to address #1134
This PR adds support for extracting user information from additional reverse proxy headers and enables custom SSO logout URLs.
Changes
New Features
HTTP_REMOTE_NAMEheader to auto-populate user's first/last nameHTTP_REMOTE_EMAILheader to auto-populate user's email addressREVERSE_PROXY_AUTH_LOGOUTenvironment variable for custom SSO logout URLsTechnical Implementation
CustomRemoteUserBackendthat extends Django'sRemoteUserBackendDocumentation
Testing
Usage Example
.env: