SSO for Postiz

[andreasdueren]

Postiz supports SSO. Could we have these .env be autoconfigured via Cloudron?

NEXT_PUBLIC_POSTIZ_OAUTH_DISPLAY_NAME="Authentik"
NEXT_PUBLIC_POSTIZ_OAUTH_LOGO_URL="https://raw.githubusercontent.com/walkxcode/dashboard-icons/master/png/authentik.png"
POSTIZ_GENERIC_OAUTH="false"
POSTIZ_OAUTH_URL="https://auth.example.com"
POSTIZ_OAUTH_AUTH_URL="https://auth.example.com/application/o/authorize"
POSTIZ_OAUTH_TOKEN_URL="https://auth.example.com/application/o/token"
POSTIZ_OAUTH_USERINFO_URL="https://authentik.example.com/application/o/userinfo"
POSTIZ_OAUTH_CLIENT_ID=""
POSTIZ_OAUTH_CLIENT_SECRET=""
# POSTIZ_OAUTH_SCOPE="openid profile email" # default values

[nebulon]

we created an internal task for this and there is a starting branch for it at https://git.cloudron.io/packages/postiz-app/-/tree/sso?ref_type=heads

[girish]

@andreasdueren I published this one but it has a bunch of issues from some testing.

• Each SSO user is 'independent'. They can all separately invite users.
• If registration is enabled, the app becomes open for all
• If registration is disabled, invited users cannot login For this reason, even in SSO mode , it is still left open
• Even if registration is disabled, one user can be registered initially. This is probably a feature.

I guess we should report this upstream , if we collect the issues