The DotAuth images provide a ready to use OAuth/OpenID Connect server.
The auth server has port 80 exposed. It does not have any HTTPS bindings, in order to avoid installing a certificate.
It should only be used behind an SSL terminating proxy Do NOT pass user credentials over an insecure channel in production.
The demo servers can be customized by setting the environment variables defined below. In addition to the application specific variables below, the standard ASP.NET environments can also be passed.
Note that some environment variables use double underscore __. This is to ensure compatibility with the .NET conversion from environment variable to hierarchical configuration value.
| Environment Variable | Type | Description |
|---|---|---|
| SALT | string | Defines a hashing salt to be used. Default value is string.Empty. |
| SERVER__NAME | string | Defines a custom name to display as the application name in UI headers. Default value is DotAuth |
| SERVER__REDIRECT | bool | When set to true then requests for / or /home are redirected to /authenticate. This effectively hides the default home page. |
| SERVER__ALLOWSELFSIGNEDCERT | bool | When set to true then allows self signed certificates and certificates whose root certificate is not trusted. The certificate must still be issued to a valid host. |
| SERVER__ALLOWHTTP | bool | When set to true then allows downloading OAuth metadata over HTTP. This option should only be set in development environments. Default value is false |
| OAUTH__AUTHORITY | url string | Used to set the OAuth server where authorization for access to management UI. |
| OAUTH__VALIDISSUERS | comma separated url strings | The comma-separated set of valid issuers for access tokens. |
| DB__CONNECTIONSTRING | string | Sets the connection string when using a backing database. |
| DB__REDISCONFIG | string | Sets the connection string for the redis server. |
| AMAZON__ACCESSKEY | string | When set then the server will configure sms authentication. |
| AMAZON__SECRETKEY | string | When set then the server will configure sms authentication. |
| KNOWN_PROXIES | comma separated string | Sets the list of known proxy IP addresses. |
Sometimes the server may not accept environment variable names with colon (:) in. In this case, it can often be replaced with double underscore (__).
The inmemory server comes with an existing user: administrator / password.
The postgres server requires the underlying database to be populated. Details later.
Content type
Image
Digest
sha256:afce73160…
Size
57.3 MB
Last updated
over 2 years ago
docker pull jjrdk/dotauth:inmemory-canary