2024-11-02 17:37:57 +01:00
|
|
|
# TODO
|
|
|
|
|
|
2024-12-09 09:38:39 +01:00
|
|
|
- [ ] better OIDC support
|
2025-01-13 20:34:35 +01:00
|
|
|
- [ ] better support of `profile` `openid` `email` `roles` scopes
|
|
|
|
|
- [ ] support of custom id_token claims mapping/binding
|
|
|
|
|
- example for Vikunja: `vikunja_teams` or `vikunja_groups` attribute
|
|
|
|
|
- being able to say :
|
|
|
|
|
- For this client, I want to add this claim
|
|
|
|
|
- with the key X
|
|
|
|
|
- and the value taken from an expression
|
|
|
|
|
- eg "json_array(user.groups)"
|
|
|
|
|
|
|
|
|
|
- [ ] i18n strings in the HTTP website.
|
2024-12-03 19:20:03 +01:00
|
|
|
|
|
|
|
|
- [ ] Instance customization support
|
|
|
|
|
|
|
|
|
|
- [ ] Public endpoint to get user avatar by id
|
|
|
|
|
- [ ] Rework avatar upload to limit size and process the image?
|
|
|
|
|
|
|
|
|
|
- Authorize form
|
|
|
|
|
- [ ] Show details about permissions
|
|
|
|
|
- [ ] Show app logo
|
|
|
|
|
|
|
|
|
|
- [ ] Support error responses by https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2.1
|
|
|
|
|
|
|
|
|
|
- [ ] feat(perms): add groups and roles
|
|
|
|
|
|
|
|
|
|
- [ ] UserWebGUI: add TOTP
|
|
|
|
|
- [ ] send emails to users
|
|
|
|
|
|
2024-11-02 17:37:57 +01:00
|
|
|
- [x] Login form
|
|
|
|
|
- [x] Register form
|
2024-11-11 23:16:50 +01:00
|
|
|
- [x] Redirect to login form if unauthenticated
|
2024-11-11 14:49:17 +01:00
|
|
|
- [x] Upload picture
|
2024-11-11 23:16:50 +01:00
|
|
|
|
|
|
|
|
- OAuth2
|
|
|
|
|
- [x] Authorize form
|
|
|
|
|
- [x] Verify authorize
|
|
|
|
|
- [x] Get access token
|
|
|
|
|
|
|
|
|
|
- [x] Support OpenID to use with demo client [oauth2c](https://github.com/cloudentity/oauth2c)
|
|
|
|
|
- .well-known/openid-configuration
|
|
|
|
|
|
2024-12-03 19:20:03 +01:00
|
|
|
- [x] architecture refactor
|
|
|
|
|
- [x] AdminCLI: init
|
|
|
|
|
- [x] AdminCLI: list users
|
|
|
|
|
- [x] AdminCLI: create and invite user
|
2024-11-11 23:16:50 +01:00
|
|
|
|
2024-12-03 19:20:03 +01:00
|
|
|
- [x] UserWebGUI: Invitation
|
2024-11-11 20:57:04 +01:00
|
|
|
|
2024-11-18 08:58:38 +01:00
|
|
|
- [x] UserWebGUI: Redirect to login when JWT expire
|
|
|
|
|
- [x] UserWebGUI: Show user authorizations.
|
2024-11-25 09:07:30 +01:00
|
|
|
- [x] UserWebGUI: Allow to revoke an authorization
|
|
|
|
|
- [x] UserWebGUI: Show available apps (basic)
|
|
|
|
|
- [x] UserWebGUI: Direct user grant flow, User can login to the target app/client, event if it did not started here.
|
|
|
|
|
- all apps must have a `/oauth2/login` URL that redirect to the right minauth /authorize URL, `login_uri` in config.toml
|
|
|
|
|
|
|
|
|
|
- [x] UserWebGUI: activate account with token
|
|
|
|
|
|
2024-12-04 18:25:56 +01:00
|
|
|
- [X] basic docker setup
|
|
|
|
|
- [ ] make `docker stop` working (handle SIGTERM/SIGINT)
|
|
|
|
|
- [ ] implement docker secrets. https://docs.docker.com/engine/swarm/secrets/
|
2024-12-09 09:38:39 +01:00
|
|
|
|
|
|
|
|
- [ ] Find a minimal OpenID client implementation like Listmonk but a little bit more mature
|
