diff --git a/OAuth2.md b/OAuth2.md index 3761d5c..8891655 100644 --- a/OAuth2.md +++ b/OAuth2.md @@ -1,8 +1,15 @@ ## Rocket.Chat can provide OAuth2 login to Wekan -## 1) Install Wekan +## 1) Install Rocket.Chat -[Wekan Snap](https://github.com/wekan/wekan-snap/wiki/Install) +[Rocket.Chat Snap](https://rocket.chat/docs/installation/manual-installation/ubuntu/snaps/) has Node at port 3000 and mongodb at port 27017. +``` +sudo snap install rocketchat-server +``` + +## 2) Install Wekan + +[Wekan Snap](https://github.com/wekan/wekan-snap/wiki/Install) has Node at port 3001 and MongoDB at port 27019. ``` sudo snap install wekan sudo snap set wekan root-url="https://wekan.example.com" @@ -10,13 +17,7 @@ sudo snap set wekan port='3001' sudo snap set core refresh.schedule=02:00-04:00 sudo snap set wekan mail-url='smtps://user:pass@mailserver.example.com:453' sudo snap set wekan mail-from='Wekan Boards ' -sudo snap set with-api='true' -sudo snap set wekan oauth2-client-id='abcde12345' -sudo snap set wekan oauth2-secret='54321abcde' -sudo snap set oauth2-server-url='https://chat.example.com' -sudo snap set oauth2-auth-endpoint='/oauth/authorize' -sudo snap set oauth2-userinfo-endpoint='/oauth/userinfo' -sudo snap set oauth2-token-endpoint='/oauth/token' +sudo snap set wekan with-api='true' ``` Edit Caddyfile: ``` @@ -37,4 +38,34 @@ chat.example.com { transparent } } -``` \ No newline at end of file +``` +Enable Wekan's Caddy: +``` +sudo snap set caddy-enabled='true' +``` + +## 3) Add Wekan settings to Rocket.Chat + +(3 dots) Options / Administration / OAuth Apps / NEW APPLICATION + +``` +Active: [X] True +Application Name: Wekan +Redirect URI: https://wekan.example.com/_oauth/oidc +Client ID: abcde12345 <=== Rocket.Chat generates random text to here +Client Secret: 54321abcde <=== Rocket.Chat generates random text to here +Authorization URL: https://chat.example.com/oauth/authorize +Access Token URL: https://chat.example.com/oauth/token +``` +Save Changes. + +## 4) Add OAuth settings to Wekan + +``` +sudo snap set wekan oauth2-client-id='abcde12345' +sudo snap set wekan oauth2-secret='54321abcde' +sudo snap set oauth2-server-url='https://chat.example.com' +sudo snap set oauth2-auth-endpoint='/oauth/authorize' +sudo snap set oauth2-userinfo-endpoint='/oauth/userinfo' +sudo snap set oauth2-token-endpoint='/oauth/token' +```