orbitroom / adarnauth

Messing around with Django and EVE SSO. Unofficial AllianceAuth v2

adarnauth

Live Demo

Started as a rewrite of the core of AllianceAuth but has ballooned to a standalone auth system.

Project Outline

EVE Models

• Character
  • Fetch from public API
  • Async update task
  • Determine owning user
  • Handle character deletion
• Corp
  • Fetch from public API
  • Async update task
  • Handle corp closure
• Alliance
  • Fetch from public API
  • Async update task
  • Handle alliance closure
• API Key
  • Update from authorized API
  • Populate characters
  • Populate corp
  • API verified permission
  • Verify via SSO
• Standings
  • Pull from authorized API

Access Rules

• Character
  • Auto-populate
• Corp
  • Auto-populate
• Alliance
  • Auto-populate
• Standing
  • Auto-populate
• Site access permission

Groups

• Extend Group Model
  • Owner/Admin/Member tiers
  • Nesting (parent/child)
• Auto Assignment

SSO

• Process SSO callback
• Generate missing user accounts
• Owner hash matching
• Internal redirect
  • Hash matching
  • Session identity verification
  • View redirect
  • Auto-cleanup

Explicit Service Support

• Mumble
  • Base service functions
  • Group mapping
  • Front-end creation
  • Signals
• Openfire
  • Base service functions
  • Broadcast
  • Group mapping
  • Front-end creation
  • Signals
• Phpbb3
  • Base service functions
  • Group mapping
  • Front-end creation
  • Signals
• Discord
  • Base service functions
  • Broadcast
  • Group mapping
  • Front-end creation
  • Signals

App Admin Hardening

Tolerate users pushing buttons on the admin site I might not like.

• access
• authentication
• eveonline
• groupmanagement
• ldap_service
• mumble
• openfire
• phpbb

Suggestions?