split-pro icon indicating copy to clipboard operation
split-pro copied to clipboard

feat: add support for OIDC auth

Open imnotjames opened this issue 11 months ago • 4 comments

adds support for OIDC authentication mechanisms

fixes #148

imnotjames avatar Jan 21 '25 21:01 imnotjames

Hmm.. I don't see any tests that currently exist! I guess that makes it easier because I don't need to write tests but.. I don't have a way to validate there & require manual testing.

imnotjames avatar Jan 22 '25 00:01 imnotjames

after looking a bit, there's no support for login errors at all so I won't be modifying this to support them

imnotjames avatar Jan 25 '25 23:01 imnotjames

Rebased against main to handle conflicts

imnotjames avatar Feb 08 '25 22:02 imnotjames

Hi @imnotjames, I'd like to help test this and get it merged in. Any chance you've got a built image I can pull?

samiralam avatar Mar 09 '25 22:03 samiralam

@samiralam @imnotjames Are you still interested in working on this?

krokosik avatar Jul 01 '25 23:07 krokosik

If there's interest in it I can resolve the conflicts. Not sure what's needed to review it beyond that.

imnotjames avatar Jul 02 '25 00:07 imnotjames

If there's interest in it I can resolve the conflicts. Not sure what's needed to review it beyond that.

I'm interested, and happy to help test.

samiralam avatar Jul 05 '25 19:07 samiralam

@imnotjames Yes, I would like to finally merge it 👍

krokosik avatar Jul 06 '25 13:07 krokosik

@samiralam sounds good, let me know what provider you've used. I can build the image for you if you'd like, once this branch gets rebased

krokosik avatar Jul 06 '25 13:07 krokosik

@samiralam I have released an experimental build with OIDC support. Can you check if you can configure your provider with it? The dockerhub tag is ossapps/splitpro:feat-148-oidc-eval

krokosik avatar Aug 22 '25 08:08 krokosik

@samiralam I have released an experimental build with OIDC support. Can you check if you can configure your provider with it?

The dockerhub tag is ossapps/splitpro:feat-148-oidc-eval

Awesome, I'll try it out this weekend and report back.

samiralam avatar Aug 23 '25 17:08 samiralam

I was able to get my provider (PocketID) to work. It does require setting your NEXTAUTH_URL to https://[example.com], and I did need to manually enter the callback URL (https://[example.com]/api/auth/callback/oidc). Might be helpful to add comments to .env.example to that effect.

~~I'm getting the following error on the balances page in iOS when opening the PWA: `Application error: a client-side exception has occured while loading [split url] (see the browser console for more information). I'm unsure if it's related to this feature or not. It seems to work fine in Safari when not used as a PWA.~~ Seems to have worked itself out.

samiralam avatar Aug 27 '25 05:08 samiralam