starred/ArchiveBox

Fork 0

mirror of https://github.com/ArchiveBox/ArchiveBox.git synced 2026-04-25 17:16:00 +03:00

[GH-ISSUE #1416] Feature Request: OIDC oauth2 sign in / registration #2363

New issue

Open

opened 2026-03-01 17:58:31 +03:00 by kerem · 3 comments

kerem commented

2026-03-01 17:58:31 +03:00

Owner

Originally created by @Aeyk on GitHub (May 5, 2024).
Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/1416

What is the problem that your feature request solves

SSO/ability to sign in and up with a OIDC identity provider.

Describe the ideal specific solution you'd want, and whether it fits into any broader scope of changes

OIDC + scope mapping, where you can grant a user admin privileges if they have a matching key-value pair in the token

What hacks or alternative solutions have you tried to solve the problem?

None yet, but I am looking at putting it behind oauth2-proxy

How badly do you want this new feature?

It would be nice to have eventually

I like ArchiveBox and would be willing to contribute development time for this feature.

Originally created by @Aeyk on GitHub (May 5, 2024). Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/1416 ## What is the problem that your feature request solves SSO/ability to sign in and up with a OIDC identity provider. ## Describe the ideal specific solution you'd want, and whether it fits into any broader scope of changes OIDC + scope mapping, where you can grant a user admin privileges if they have a matching key-value pair in the token ## What hacks or alternative solutions have you tried to solve the problem? None yet, but I am looking at putting it behind oauth2-proxy ## How badly do you want this new feature? It would be nice to have eventually I like ArchiveBox and would be willing to contribute development time for this feature.

kerem commented

2026-03-01 17:58:31 +03:00

Author

Owner

@pirate commented on GitHub (May 5, 2024):

I've wanted to add Django-allauth for a while, it would add support for tons of Oauth/oidc/social auth providers (and SAML).

I don't have time to do this myself currently as I'm focused on other priorities, but I welcome PRs!

@pirate commented on GitHub (May 5, 2024): I've wanted to add Django-allauth for a while, it would add support for tons of Oauth/oidc/social auth providers (and SAML). I don't have time to do this myself currently as I'm focused on other priorities, but I welcome PRs!

kerem commented

2026-03-01 17:58:31 +03:00

Author

Owner

@JKL213 commented on GitHub (May 7, 2024):

I'm also interested. Might do some experiments to implement OAuth on my own, mainly for Authentik support. Right now, my setup is less than ideal.

@JKL213 commented on GitHub (May 7, 2024): I'm also interested. Might do some experiments to implement OAuth on my own, mainly for Authentik support. Right now, my setup is less than ideal.

kerem commented

2026-03-01 17:58:31 +03:00

Author

Owner

@pirate commented on GitHub (May 7, 2024):

For anyone who arrives here via Google, we have some docs on the authentication methods we currently support (LDAP, reverse proxy, etc.) and it provides a little bit of guidance on how to set up Authentik or oauth2-proxy as a bridge to link a SAML/OIDC provider to ArchiveBox:

https://github.com/ArchiveBox/ArchiveBox/wiki/Setting-up-Authentication#not-yet-supported-saml--oauth2--openid-authentication

(improvements to these docs are welcome from anyone who as done a setup like this themselves, changes can be suggested as PRs here)

The ideal final solution is to just integrate django-allauth with ArchiveBox natively though, then users wont need to run a bridge or IdP server on their own (PR's welcome, but please don't hand-write your own auth code, stick to django-allauth).

@pirate commented on GitHub (May 7, 2024): For anyone who arrives here via Google, we have some docs on the authentication methods we currently support (LDAP, reverse proxy, etc.) and it provides a little bit of guidance on how to set up Authentik or oauth2-proxy as a bridge to link a SAML/OIDC provider to ArchiveBox: https://github.com/ArchiveBox/ArchiveBox/wiki/Setting-up-Authentication#not-yet-supported-saml--oauth2--openid-authentication *(improvements to these docs are welcome from anyone who as done a setup like this themselves, changes can be suggested as [PRs here](https://github.com/ArchiveBox/docs/blob/master/Setting-up-Authentication.md))* The ideal final solution is to just integrate `django-allauth` with ArchiveBox natively though, then users wont need to run a bridge or IdP server on their own (PR's welcome, but please don't hand-write your own auth code, stick to `django-allauth`).

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/ArchiveBox#2363

No description provided.

Rows
Columns