Skip to content

zrok Controller Alternative Login Options #699

Open
@icsy7867

Description

@icsy7867

It would be awesome to have some other authentication options for the ZROK Controller login webpage.

image

I checked the docs and did not really see anything, but some low hanging (possible) fruit:

  1. Email only magic link. No passwords! This would actually work in a lot of my use cases. It would be pretty secure in our environment and I wouldn't have to create and distribute passwords to anyone (When I know they arent going to remember it anyways!)

  2. HTTP Header auth - A lot of tools (caddy-security, 0Auth, Authelia, Apache Mellon, etc...) can set special header values when authentication is successful. In Caddy-Security's option, when using OIDC it uses X-Token-User-Email. The login should check for this value, and assign the user based on this value. If the user does not exist, go ahead and create the user.

  3. Of course, LDAP, OIDC, SAML, etc.... but those would probably require more intense changes to the code.

Metadata

Metadata

Labels

enhancementEnhancement of an existing featureepicTop-level marquee features

Type

No type

Projects

Status

Backlog

Relationships

None yet

Development

No branches or pull requests

Issue actions