C4illin
Support SSO Authentication and permission system
Hi, i really like this project so far. One key feature that is missing for me though is the ability to use my existing SSO Server (i use Authentik) with this project via Open ID Connect. As a workaround for now, i can set ALLOW_UNAUTHENTICATED=true and handle authentication with my reverse proxy. I would love the ability to use group mappings to allow different users to convert different file types or have different resource limits. For example, this is how i would like to use this feature:
- admin: can do everything, no limits, can manage limits for other groups, autoDelete: 24h
- family_member: File Size Limit: 10GB, Time limit: 90 min, formats:*, rate limit: none, , autoDelete: 24h
- friends: File size Limit: 1Gb, Time limit: 5m, formats: *, rate limit: 100 conversions/hour, autoDelete: 5m
-
(public users): File Size Limit: 1Gb, Time Limit: 30s,formats:, rate limit: 10 conversions/hour, autoDelete: instantly after download
I know this is quite a lot to ask for and i would like to provide my help when i have more time in about a month.
Honestly I would prefer to limit it down to certain formats
That would be part of it
SSO Support would be amazing. (We're also on Authentik, OAuth/OIDC would probably easiest and most widely usable)
- admin: can do everything, no limits, can manage limits for other groups, autoDelete: 24h
Was just about to create an issue about this! Yeah I want to use Pocket ID for the auth.
I will say the same thing I said on other projects (that have now received OIDC support): I'd be willing to pay 50 bucks for someone to work on this. Maybe others here would also be willing to support this monetarily?
i know it's been far longer than one month, but a lot has happened in my life since i last said i wanted to help... Anyways, now i actually have some time to work on this. I can't promise too much, but if i don't underestimate the effort, i should be able to get basic SSO support working this year still :D
@Rdeisenroth Not sure if this will help, I was able to use claude code to get me working SSO on PocketID https://github.com/NidPlays/Convertx-cc
Couldn't we use betterAuth for user handeling & oidc? This is also currently being discussed for uptime-kuma.
I have no experience with betterAuth and I am by no means a frontend developer but I hear a lot of great things about it from our frontend developers. This is just something I want to throw in here.
