Extra Auth

[dimtar]

Hi all.

I’ve spent some time reading but either I can’t find the feature or it simply doesn’t exist.
I understand that Cloudron has a user system and can act as an SSO provider with apps that support it.

What I am wondering is, is there a way to add an extra auth step? For example like Authentik or Authelia where you must authenticate before you even see the app.

For example say I installed Immich and then enabled this feature, I would need to login/auth before I even saw the Immich login page?

Is this possible/available?

[joseph]

@dimtar we don't have this feature, no. With your setup, does one login twice? Once in Authentik/Authelia and then into Immich ?

[dimtar]

I don't have that setup currently but it's what I am looking for.
I feel that opening services like Immich to the web would be more secure if they had an extra step.

[fbartels]

Cloudron kind of has this functionality, but it is only used in Apps that otherwise would not have authentication at all: https://docs.cloudron.io/packaging/addons/#proxyauth

@joseph said in Extra Auth:

With your setup, does one login twice? Once in Authentik/Authelia and then into Immich ?

Some applications can make use of such an external auth and recognize which user should be logged in. For others you would need to login twice. Similarly if the application you put behind such a wall has e.g. an Android app then also this app needs to know how to pass the "extra auth".

[joseph]

@fbartels said in Extra Auth:

Android app then also this app needs to know how to pass the "extra auth".

Good point! In all likelihood it will break APIs