meissa/taiga-contrib-oidc-auth
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
79 commits 2 branches 0 tags 145 KiB
  • Python 64.1%
  • CoffeeScript 22%
  • JavaScript 10.8%
  • Pug 1.9%
  • Shell 1.2%
Find a file
Exact
Michael Jerger ee7b335710
Some checks failed
Docker Image CI / Push Docker image to GHCR and DockerHub (push) Failing after 3m0s
Details
minor updates
2026-02-19 15:30:31 +01:00
.github/workflows build: Update workflow to push go GHCR 2024-09-03 14:46:45 +02:00
back feat: Optionally slugify username 2024-02-14 11:30:03 +01:00
front fix: typo in template url 2023-02-24 20:28:43 +01:00
conf.snippet.json feat: Add Docker images 2024-02-14 13:41:07 +01:00
config.snippet.py feat: Add Docker images 2024-02-14 13:41:07 +01:00
config_env_subst.snippet.sh feat: Add Docker images 2024-02-14 13:41:07 +01:00
Dockerfile.back feat: Update to 6.8.1 2024-09-03 14:46:45 +02:00
Dockerfile.front minor updates 2026-02-19 15:30:31 +01:00
README.md minor updates 2026-02-19 15:30:31 +01:00
TODO.md Make the plugin OIDC-generic 2018-10-30 09:42:58 +01:00
urls.py feat: Add Docker images 2024-02-14 13:41:07 +01:00

README.md

Taiga Contrib OIDC Auth

Forked from mig5/taiga-contrib-oidc-auth

Kudos to all known contributors:

This repository also provides Docker images built on top of the official Taiga.io images including the OIDC authentication provider.

Configuration

taiga-front

Configure the following environment variables for the container running taiga-front:

ENABLE_OIDC_AUTH="true"
OIDC_BUTTON_TEXT="OIDC"  # optionally configure login button
DEFAULT_LOGIN_ENABLED="false"  # optionally disable local user login

Enabling OIDC login is independent from setting PUBLIC_REGISTER_ENABLED.

taiga-back

Configure the following environment variables for the container running taiga-back:

ENABLE_OIDC_AUTH="True"
OIDC_ISSUER="<url of your OIDC provider>"
OIDC_CLIENT_ID="<client id configured in OIDC provider"
OIDC_CLIENT_SECRET="<client secret configured in OIDC provider"
OIDC_SCOPES="openid profile email"  # optionally configure scopes

# optionally configure endpoints
OIDC_AUTHORIZATION_ENDPOINT="<url to authorization endpoint>"
OIDC_JWKS_ENDPOINT="<url to JWKS endpoint>"
OIDC_TOKEN_ENDPOINT="<url to token endpoint>"
OIDC_USERINFO_ENDPOINT="<url to user info endpoint>"

# if you run behind a reverse proxy with TLS termination
# activate this to use HTTPS in the redirect URI
USE_X_FORWARDED_HOST="True"

Advanced Configuration / Migration

If you want to migrate from an existing installation using robrotheram/taiga-contrib-openid-auth or if you need to configure the claims returned from your OIDC provider, you can set the following environment variables for the container running taiga-back:

OIDC_AUTHDATA_KEY="openid"  # use existing connection from robrotheram/taiga-contrib-openid-auth
OIDC_SLUGGIFY_USERNAME="True"  # generate the same username as robrotheram/taiga-contrib-openid-auth
OIDC_CLAIM_USERNAME="preferred_username"  # use preferred username from OpenID
OIDC_CLAIM_AUTHDATA="sub"  # claim used to identify OAuth users
OIDC_CLAIM_EMAIL="email"  # claim containing user's e-mail address
OIDC_CLAIM_FULLNAME="name"  # claim containing user's full name