dhatim/cloudpass-discourse-sso repository overview

⁠cloudpass-discourse-sso

This application allows authenticating to Discourse with Cloudpass accounts.

⁠Installation

⁠Docker

An image is available on Docker Hub⁠. Simply run it with the right environment variables to configure it (see below).

⁠Git

• Clone this repo
• npm install
• configure (see below)
• npm start

⁠Configuration

⁠Application

⁠With environement variables

⁠With a configuration file

These values can also be read from a configuration file. simply copy the file config/custom-environment-variables.yaml in a new file config/local.yaml, and edit it with the desired values

⁠Cloudpass

Add the following Custom Data in the Cloudpass Application:

{
  "discourse":{
    "ssoSecret": "super_secret_stuff",
    "logoutCallbackUri": "http://discourse.example.com"
  }
}

• ssoSecret is secret shared with Discourse used to hash SSO payloads, it can be any string (c.f. Discourse documentation⁠ for more information
• logoutCallbackUri is the URL on which users must be redirected afer logout (e.g. the URL of your Discourse instance)

⁠Discourse

In Settings > Login:

• enable sso: yes
• sso url: Enter the URL on which this application is accessible, followed by /{applicationId}/login (e.g. http:/discourse-sso.example.com/0485cf2-6032-49dd-b6ad-126e3ca8bd86/login)
• sso secret: Enter the same secret as in the Application Custom Data

In Settings > Users:

• logout redirect: Enter the URL on which this application is accessible, followed by /{applicationId}/logout (e.g. http:/discourse-sso.example.com/0485cf2-6032-49dd-b6ad-126e3ca8bd86/logout)

⁠TODO

Add some tests