Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2025-12-23 19:00:12 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Added some CAS and SAML settings. Not tested. Please test and send pull requests if it does not work.

Browse source 
See https://github.com/wekan/wekan/wiki/SAML and https://github.com/wekan/wekan/wiki/CAS

Thanks to xet7 !

Related #3204,
related #708
This commit is contained in:
Lauri Ojansivu 2020-09-14 19:57:50 +03:00
parent e0192f570e
commit 214c86cc22
15 changed files with 325 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

72
server/authentication.js
View file

@ -63,7 +63,10 @@ Meteor.startup(() => {
};
if (Meteor.isServer) {
if (process.env.OAUTH2_CLIENT_ID !== '') {
if (
process.env.OAUTH2_ENABLED === 'true' ||
process.env.OAUTH2_ENABLED === true
) {
ServiceConfiguration.configurations.upsert(
// eslint-disable-line no-undef
{ service: 'oidc' },
@ -85,5 +88,72 @@ Meteor.startup(() => {
},
);
}
} else if (
process.env.CAS_ENABLED === 'true' ||
process.env.CAS_ENABLED === true
) {
ServiceConfiguration.configurations.upsert(
// eslint-disable-line no-undef
{ service: 'cas' },
{
$set: {
baseUrl: process.env.CAS_BASE_URL,
loginUrl: process.env.CAS_LOGIN_URL,
serviceParam: 'service',
popupWidth: 810,
popupHeight: 610,
popup: true,
autoClose: true,
validateUrl: process.env.CASE_VALIDATE_URL,
casVersion: 3.0,
attributes: {
debug: process.env.DEBUG,
},
},
},
);
} else if (
process.env.SAML_ENABLED === 'true' ||
process.env.SAML_ENABLED === true
) {
ServiceConfiguration.configurations.upsert(
// eslint-disable-line no-undef
{ service: 'saml' },
{
$set: {
provider: process.env.SAML_PROVIDER,
entryPoint: process.env.SAML_ENTRYPOINT,
issuer: process.env.SAML_ISSUER,
cert: process.env.SAML_CERT,
idpSLORedirectURL: process.env.SAML_IDPSLO_REDIRECTURL,
privateKeyFile: process.env.SAML_PRIVATE_KEYFILE,
publicCertFile: process.env.SAML_PUBLIC_CERTFILE,
identifierFormat: process.env.SAML_IDENTIFIER_FORMAT,
localProfileMatchAttribute:
process.env.SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE,
attributesSAML: process.env.SAML_ATTRIBUTES || [
'sn',
'givenName',
'mail',
],
/*
settings = {"saml":[{
"provider":"openam",
"entryPoint":"https://openam.idp.io/openam/SSORedirect/metaAlias/zimt/idp",
"issuer": "https://sp.zimt.io/", //replace with url of your app
"cert":"MIICizCCAfQCCQCY8tKaMc0 LOTS OF FUNNY CHARS ==",
"idpSLORedirectURL": "http://openam.idp.io/openam/IDPSloRedirect/metaAlias/zimt/idp",
"privateKeyFile": "certs/mykey.pem", // path is relative to $METEOR-PROJECT/private
"publicCertFile": "certs/mycert.pem", // eg $METEOR-PROJECT/private/certs/mycert.pem
"dynamicProfile": true // set to true if we want to create a user in Meteor.users dynamically if SAML assertion is valid
"identifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified", // Defaults to urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
"localProfileMatchAttribute": "telephoneNumber" // CAUTION: this will be mapped to profile.<localProfileMatchAttribute> attribute in Mongo if identifierFormat (see above) differs from urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress,
"attributesSAML": [telephoneNumber, sn, givenName, mail], // attrs from SAML attr statement, which will be used for local Meteor profile creation. Currently no real attribute mapping. If required use mapping on IdP side.
}]}
*/
},
},
);
}
});