f72fa41a75
* website: adds dokuwiki integration * Apply suggestions from code review Signed-off-by: Jens L. <jens@beryju.org> * removed patch note since patch is upstream now * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens L. <jens@beryju.org> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Christian Mellwig <mellwig.c@fug-elektronik.de> Co-authored-by: Jens L <jens@beryju.org> Co-authored-by: Jens Langhammer <jens@goauthentik.io>
2.6 KiB
| title |
|---|
| DokuWiki |
Support level: Community
What is Service Name
From https://en.wikipedia.org/wiki/DokuWiki
:::note DokuWiki is a wiki application licensed under GPLv2 and written in the PHP programming language. It works on plain text files and thus does not need a database. Its syntax is similar to the one used by MediaWiki. It is often recommended as a more lightweight, easier to customize alternative to MediaWiki. :::
Preparation
The following placeholders will be used:
dokuwiki.companyis the FQDN of the DokiWiki install.authentik.companyis the FQDN of the authentik install.
Service Configuration
In DokuWiki, navigate to the Extension Manager section in the Administration interface and install
Navigate to Configuration Settings section in the Administration interface and change Oauth and Oauthgeneric options:
For Oauth:
- Check the plugin»oauth»register-on-auth option
For Oauthgeneric:
- plugin»oauthgeneric»key: The Application UID
- plugin»oauthgeneric»secret: The Application Secret
- plugin»oauthgeneric»authurl: https://authentik.company/application/o/authorize/
- plugin»oauthgeneric»tokenurl: https://authentik.company/application/o/token/
- plugin»oauthgeneric»userurl: https://authentik.company/application/o/userinfo/
- plugin»oauthgeneric»authmethod: Bearer Header
- plugin»oauthgeneric»scopes: email, openid, profile
- plugin»oauthgeneric»needs-state: checked
- plugin»oauthgeneric»json-user: preferred_username
- plugin»oauthgeneric»json-name: name
- plugin»oauthgeneric»json-mail: email
- plugin»oauthgeneric»json-grps: groups
In the Configuration Settings section in the Administration interface navigate to Authentication and activate oauth in Authentication backend.
authentik Configuration
Provider
In authentik, under Providers, create an OAuth2/OpenID Provider with these settings:
- Redirect URI: The Callback URL / Redirect URI from plugin»oauth»info, usually
dokuwiki.company/doku.php - Signing Key: Select any available key
Note the client ID and client secret, then save the provider. If you need to retrieve these values, you can do so by editing the provider.
Application
In authentik, create an application which uses this provider. Optionally apply access restrictions to the application using policy bindings.
Set the Launch URL to the Callback URL / Redirect URI (dokuwiki.company/doku.php).