{"repo":"YunoHost/SSOwat","free":true,"listed":false,"github":"https://github.com/YunoHost/SSOwat","clone":"git clone https://github.com/YunoHost/SSOwat.git","description":"A simple SSO for NGINX, written in Lua","language":"Lua","stars":240,"topics":["lua","ldap","nginx-module","authentication-portal","sso","yunohost"],"license":"AGPL-3.0","category":"auth-billing-email","readme_excerpt":"SSOwat ====== A simple LDAP SSO for NGINX, written in Lua. - Please report issues to the YunoHost bugtracker. Installation ------------ Fetch the repository NGINX configuration ------------------- Add SSOwat's NGINX configuration ( http{} scope) You can also put the access by lua file directive in a server{} scope if you want to protect only a vhost. SSOwat configuration -------------------- If you use YunoHost, you may want to edit the /etc/ssowat/conf.json.persistent file, since the /etc/ssowat/conf.json will often be overwritten. Available parameters Only the portal domain SSOwat configuration parameters is required, but it is recommended to know the others to fully understand what you can do with it. - cookie secret file : Where the secret used for signing and encrypting cookie is stored. It should only be readable by root. - cookie name : The name of the cookie used for authentication. Its content is expected to be a JWT signed with the cookie secret and should contain a key user and password (which is needed for Basic HTTP Auth). Because JWT is only encoded and signed (not encrypted), the password is expected to be encrypted using the cookie secret. - session folder : A path to a folder where files exists for any valid valid session id. SSOwat will check for the last modification date to confirm that the session is not expired. - domain portal urls : Location of the portal to use for login and browsing apps, to redirect to when access to some route is denied - redirecte","default_branch":null,"files":null,"tree":[],"storefront":"/r/YunoHost","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/YunoHost/SSOwat/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}