Add OIDC support for self host

[lperin-solvd]

It would be pretty great to have Open ID Connect support for self hosted servers (like Authentik or Authelia)

[Arno500]

That said, it could also be a good opportunity to add social login for the managed version

[zmberber]

indeed, SSO is one of the features i am really missing here.

[JerboaGobi]

Seconded, SSO support via either OIDC or SAML.

[Webbanditten]

Expressing my interest here as well

[gi-yt]

+1, it would be a great addition to the project

[Webbanditten]

It just makes so much sense. I have loads of family members that if they were to remember another set of passwords would implode.

[txwgnd]

+1 for OIDC. It's a feature holding me back to use Ente..

[Gurkengewuerz]

+1, would be very cool. ente is almost the last service i am hosting without oidc.

[nanoandrew4]

+1 for OICD, I'm migrating several of my self hosted services to use Authentik and just found ente is the only one that does not support OICD or some other form of single login

[NachoPicchu]

I believe implementing OIDC in Ente wouldn't be very straightforward. Whoever is in control of the auth server will be able to to authenticate as any user they please (think of the authentik impersonation feature).
Users would need to create a second password within Ente in order to encrypt/decrypt their files.

[FlexibleToast]

I believe implementing OIDC in Ente wouldn't be very straightforward. Whoever is in control of the auth server will be able to to authenticate as any user they please (think of the authentik impersonation feature). Users would need to create a second password within Ente in order to encrypt/decrypt their files.

Yes, that would make sense. However, something similar to how Bitwarden handles this could be done. After a user has entered their encryption password on a device the key could be stored on that local device and locked by the oidc token.