starred/karakeep

Fork 0

mirror of https://github.com/karakeep-app/karakeep.git synced 2026-04-26 00:16:03 +03:00

[GH-ISSUE #92] [Feature request] NextAuth Providers for OAuth/SSO #78

New issue

Closed

opened 2026-03-02 11:46:20 +03:00 by kerem · 12 comments

kerem commented

2026-03-02 11:46:20 +03:00

Owner

Originally created by @schmoaaaaah on GitHub (Apr 9, 2024).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/92

The ability to use the NextAuth Providers for OAuth Authentication would be nice.

Originally created by @schmoaaaaah on GitHub (Apr 9, 2024). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/92 The ability to use the [NextAuth Providers](https://next-auth.js.org/providers/) for OAuth Authentication would be nice.

kerem

2026-03-02 11:46:20 +03:00

closed this issue
added the
feature request
label

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@linedpaper commented on GitHub (Jun 4, 2024):

Agreed, any sort of external would be great!

@linedpaper commented on GitHub (Jun 4, 2024): Agreed, any sort of external would be great!

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@kamtschatka commented on GitHub (Jun 5, 2024):

which providers would be most interesting? there are 60+ proviers, that is a bit much ;-)

@kamtschatka commented on GitHub (Jun 5, 2024): which providers would be most interesting? there are 60+ proviers, that is a bit much ;-)

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@MohamedBassem commented on GitHub (Jun 5, 2024):

@kamtschatka I'd add only the generic oauth one

@MohamedBassem commented on GitHub (Jun 5, 2024): @kamtschatka I'd add only the generic oauth one

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@schmoaaaaah commented on GitHub (Jun 5, 2024):

You could also do it with big ENV vars:

providers: |
  AuthentikProvider({
    clientId: process.env.AUTHENTIK_ID,
    clientSecret: process.env.AUTHENTIK_SECRET,
    issuer: process.env.AUTHENTIK_ISSUER,
  })

and add them to the provideres array in Nextauth, but I agree the Generic Oauth would be easier to implement.

@schmoaaaaah commented on GitHub (Jun 5, 2024): You could also do it with big ENV vars: ```yaml providers: | AuthentikProvider({ clientId: process.env.AUTHENTIK_ID, clientSecret: process.env.AUTHENTIK_SECRET, issuer: process.env.AUTHENTIK_ISSUER, }) ``` and add them to the provideres array in Nextauth, but I agree the Generic Oauth would be easier to implement.

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@SeeJayEmm commented on GitHub (Jun 5, 2024):

I don't know anything about Nextauth but any generic OAuth or SAML implementation would be good. Whichever you find easiest to implement.

@SeeJayEmm commented on GitHub (Jun 5, 2024): I don't know anything about Nextauth but any generic OAuth or SAML implementation would be good. Whichever you find easiest to implement.

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@gtzapper commented on GitHub (Jul 10, 2024):

+1 , any generic oauth will be good.

@gtzapper commented on GitHub (Jul 10, 2024): +1 , any generic oauth will be good.

kerem commented

2026-03-02 11:46:21 +03:00

Author

Owner

@MohamedBassem commented on GitHub (Sep 22, 2024):

For all the people waiting for SSO, it's now released in version 0.17 and you have @kamtschatka to thank for that! I know that this was a popular request and it took us some time to get to it, but it's finally here!

Note, if the account is created for the first time using SSO (no password configured), you'll have to use the new "login by API keys" in the extension and the mobile apps. The new mobile app versions that introduce this feature are currently under review by google/apple.

If you already have an account, and you want to link it with the SSO account after configuring it, you'll want to set OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=true.

Give it a try and let us know if you have any questions!

@MohamedBassem commented on GitHub (Sep 22, 2024): For all the people waiting for SSO, it's now released in version 0.17 and you have @kamtschatka to thank for that! I know that this was a popular request and it took us some time to get to it, but it's finally here! Note, if the account is created for the first time using SSO (no password configured), you'll have to use the new "login by API keys" in the extension and the mobile apps. The new mobile app versions that introduce this feature are currently under review by google/apple. If you already have an account, and you want to link it with the SSO account after configuring it, you'll want to set `OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=true`. Give it a try and let us know if you have any questions!

kerem commented

2026-03-02 11:46:22 +03:00

Author

Owner

@MohamedBassem commented on GitHub (Sep 22, 2024):

@MFYDev I've just pushed the new documentation version, you can find it here: https://docs.hoarder.app/configuration#authentication--signup :)

Sorry I should have linked that earlier!

@MohamedBassem commented on GitHub (Sep 22, 2024): @MFYDev I've just pushed the new documentation version, you can find it here: https://docs.hoarder.app/configuration#authentication--signup :) Sorry I should have linked that earlier!

kerem commented

2026-03-02 11:46:22 +03:00

Author

Owner

@MFYDev commented on GitHub (Sep 22, 2024):

Thank you, just tested and it is working well with Authentik, however can we get an option to disable the default password log in form?

@MFYDev commented on GitHub (Sep 22, 2024): Thank you, just tested and it is working well with Authentik, however can we get an option to disable the default password log in form?

kerem commented

2026-03-02 11:46:22 +03:00

Author

Owner

@MohamedBassem commented on GitHub (Sep 22, 2024):

@MFYDev Glad that it's working well! I think this is a reasonable feature request. Can you file a separate issue for it? Shouldn't be too hard to implement :)

@MohamedBassem commented on GitHub (Sep 22, 2024): @MFYDev Glad that it's working well! I think this is a reasonable feature request. Can you file a separate issue for it? Shouldn't be too hard to implement :)

kerem commented

2026-03-02 11:46:22 +03:00

Author

Owner

@MFYDev commented on GitHub (Sep 22, 2024):

Sure, thank you, on it!

@MFYDev commented on GitHub (Sep 22, 2024): Sure, thank you, on it!

kerem commented

2026-03-02 11:46:22 +03:00

Author

Owner

@MFYDev commented on GitHub (Sep 22, 2024):

@MohamedBassem Done, just created the FR

@MFYDev commented on GitHub (Sep 22, 2024): @MohamedBassem Done, just created the FR

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/karakeep#78

No description provided.

Rows
Columns