Heimdall icon indicating copy to clipboard operation
Heimdall copied to clipboard

Enable/Disable Items with authentification headers

Open knom opened this issue 7 months ago • 2 comments

Hey there, I'm trying to reinvigoration #1304 by doing the the changes requested @KodeStar and @albinmedoc.

Use case:

  • the Heimdall server is located behind a login page provides by a SSO service like authelia or Keycloak
  • You want to define common services only once and share them between users enabled by the roles they're assigned to

New feature when enabled: *The Heimdall settings (order of items, application list, tag list, settings) are only visible for users with role admin.

  • For every application and tag the new field Authentification role is added. This filed contains the role to witch the application or tag is displayed.
  • Applications and tags are only displayed when the logged in user is member of the configured role.

Configuration:

  • The feature can be enabled/disabled in the env file with AUTH_ROLES_ENABLE.
  • It is possible to configure the header containg the roles by AUTH_ROLES_HEADER and AUTH_ROLES_HTTP_HEADER.
  • The role to enable the Heimdall settings can be set wit AUTH_ROLES_ADMIN.

@KodeStar: Please let me know if anything else is required - as I really would like to ship this (for my own sake - to use with my AUTHENTIK instance).

Thanks, knom.

knom avatar May 05 '25 09:05 knom

This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.

LinuxServer-CI avatar Jun 04 '25 15:06 LinuxServer-CI

@KodeStar @albertsj1 @tkolzer?

Anybody willing to do the pr review/lgtp approval?

knom avatar Jun 09 '25 11:06 knom

This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.

LinuxServer-CI avatar Jul 09 '25 15:07 LinuxServer-CI

This pull request is locked due to inactivity

LinuxServer-CI avatar Aug 10 '25 15:08 LinuxServer-CI