SSO support via OIDC

[nogweii]

Liwan is amazing! There is only one thing missing IMO, which is SSO support. Preferably via native OpenID Connect support in liwan, but trusted-headers would also work (then it can be fronted by something like oauth2-proxy).

Generally, this is just so I have one less password to remember/store.

If it's possible, it'd be even more amazing to automatically promote the user to admin based on their presence in a group attached to the JWT sent by the OIDC server.

Thanks for developing Liwan!

[explodingcamera]

Hi, this is definitely something I'd like to add in v1.7.0. I'm currently leaning more to oidc support + maybe ldap.

[franzos]

Hi there, first of all - Liwan is awesome; I've been on Matomo for 10+ years, but realized I didn't use 9/10 features; After a bit of research, I landed on Liwan; I also needed SSO support, so I forked the project, and added it: https://github.com/franzos/liwan - it still needs some polish, but happy to open a PR, if there's some interest. Cheers!

[explodingcamera]

Hi there, first of all - Liwan is awesome; I've been on Matomo for 10+ years, but realized I didn't use 9/10 features; After a bit of research, I landed on Liwan; I also needed SSO support, so I forked the project, and added it: franzos/liwan - it still needs some polish, but happy to open a PR, if there's some interest. Cheers!

Nice 👍 I'll probably take some inspiration from your fork if that's all right, but will probably implement that feature myself.