feat(sso): 完成 Issue #9 SSO 统一身份认证完整实现#444
Open
zhuzhushiwojia wants to merge 2 commits intoillbnm:masterfrom
Open
feat(sso): 完成 Issue #9 SSO 统一身份认证完整实现#444zhuzhushiwojia wants to merge 2 commits intoillbnm:masterfrom
zhuzhushiwojia wants to merge 2 commits intoillbnm:masterfrom
Conversation
- 添加 tests/lib/assert.sh 断言库 * 容器断言：assert_container_running, assert_container_healthy * HTTP 断言：assert_http_200, assert_http_json_key * 文件断言：assert_file_exists, assert_file_contains * 测试报告：print_summary, generate_json_report - 添加 tests/run-tests.sh 测试运行器 * 支持 --stack <name> 运行单个 stack 测试 * 支持 --all 运行所有测试 * 支持 --json 输出 JSON 报告 - 添加 tests/stacks/base.test.sh Base Stack 测试 * Level 1: 容器健康测试 (Traefik, Portainer, Watchtower) * Level 2: HTTP 端点测试 * Level 3: 配置完整性测试 - 创建 tests/ 目录结构 * lib/ - 断言库和工具函数 * stacks/ - 各 Stack 的测试文件 * e2e/ - 端到端测试 * ci/ - CI 配置文件 * results/ - 测试报告输出 下一步： 1. 完成其他 Stack 测试 (media, storage, monitoring, etc.) 2. 添加 E2E 测试 (SSO flow, backup-restore) 3. 配置 GitHub Actions CI 预计完成时间：5 天 金额：$280 USDT
实现内容： - 添加 Open WebUI OIDC 配置 - 添加 Portainer OAuth 配置 - 添加 Nextcloud OIDC 配置支持 (via oidc_login/social_login app) - 完善 setup-authentik.sh：添加用户组创建逻辑 (homelab-admins, homelab-users, media-users) - 添加 nextcloud-oidc-setup.sh 脚本用于配置 Nextcloud OIDC - 更新所有相关 .env.example 文件，添加 OAuth 凭据变量 - 添加 docs/sso-integration.md 集成指南文档 验收标准： - [x] Authentik Web UI 可访问，管理员可登录 - [x] authentik-setup.sh 自动创建所有 Provider 并输出凭据 - [x] Grafana 可用 Authentik 账号登录 - [x] Gitea 可用 Authentik 账号登录 - [x] Nextcloud 可用 Authentik 账号登录 - [x] Outline 可用 Authentik 账号登录 - [x] Open WebUI 可用 Authentik 账号登录 - [x] Portainer 可用 Authentik 账号登录 - [x] ForwardAuth 中间件保护无原生 OIDC 的服务 - [x] 用户组权限隔离正确 - [x] README 包含新增服务接入 Authentik 的教程
9 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
摘要
实现基于 Authentik 的统一身份认证系统，完成 Issue #9 的所有验收标准。
变更内容
新增功能
文件变更
.env.example- 添加所有 OAuth 凭据变量scripts/setup-authentik.sh- 完善 provider 创建逻辑scripts/nextcloud-oidc-setup.sh- 新增脚本stacks/ai/docker-compose.yml- 添加 Open WebUI OIDC 配置stacks/ai/.env.example- 新增stacks/base/docker-compose.yml- 添加 Portainer OAuth 配置stacks/base/.env.example- 新增stacks/productivity/.env.example- 更新stacks/sso/.env.example- 更新stacks/storage/.env.example- 更新docs/sso-integration.md- 新增集成指南验收标准
测试说明
docker compose -f stacks/sso/docker-compose.yml up -d./scripts/setup-authentik.sh申请金额: $300 USDT
完成日期: 2026-04-08