cryptpad / sso Goto Github PK

Organizations could have the username and mail stored in different claims then the default OIDC ones.

The scope and claim should be configurable the match these setups.

Hi,

i am running 2024.3.0 with the SSO plugin, registered an OpenID provider (running authentik 2024.4.2). Redirects and consent seem to work, but I am redirected to a page where I am asked to set a cp password. Regardless of what I enter or what I click, I can't set the password (the button seems to have no event bound).

This is the first time I am trying to setup SSO, I didn't come from a working setup upgrading or something.

I am using firefox to access cryptpad

Changing cpPassword: true doesn't change anything...

Anonymized SSO config:

//const fs = require('node:fs');
module.exports = {
    enabled: true,
    enforced: false,
    cpPassword: false,
    forceCpPassword: false,
    list: [
    {
        name: 'example-provider.id',
        type: 'oidc',
        url: 'https://id.example.com/application/o/example-cryptpad/',
        client_id: "...",
        client_secret: "...",
        jwt_alg: 'RS256'
    }
    ]
};

It took me about four tries to setup SSO as well as many others, so I am going to rework the README to be clearer on the steps to take to set SSO up.

Hi,

I asked in the matrix chat and was advised to open a bug. I am trying to set up SSO using Authelia and it does not work, throwing the following error:

"Authorization Request failed with error: The state is missing or does not have enough characters and is therefore considered too weak. Request parameter 'state' must be at least be 8 characters long to ensure sufficient entropy."

Quick google shows sames/similar issue in other projects: outline/outline#2663 and hackmdio/codimd#1512

I don't know how to verify if the state parameter is being sent by the SSO plugin.

When I create a new account with keycloak the account user is something like u6a2vosi8rc95t/ndpmw1bpy84qxoabl

is it what not supported: Store extra information from users coming from SSO mean or did I configure something wrongly?