updated sample config to reflect current development

This commit is contained in:
HB9HIL
2026-03-09 12:05:46 +01:00
parent 651845bf77
commit 29cc658f14
2 changed files with 58 additions and 18 deletions

View File

@@ -119,15 +119,35 @@ $config['auth_mode'] = '3';
$config['auth_level'][3] = 'Operator';
$config['auth_level'][99] = 'Administrator';
$config['auth_header_enable'] = false;
$config['auth_header_create'] = false;
$config['auth_headers_username'] = "HTTP_X-Username";
$config['auth_headers_firstname'] = null;
$config['auth_headers_lastname'] = null;
$config['auth_headers_callsign'] = null;
$config['auth_headers_email'] = null;
$config['auth_header_text'] = "Login with SSO";
$config['auth_header_club_id'] = "";
/*
|--------------------------------------------------------------------------
| Third-Party Authentication (SSO)
|--------------------------------------------------------------------------
|
| This section defines settings for third-party authentication over an external identity provider.
| When enabled, Wavelog will look for a specific HTTP header containing an access token, which can be used to authenticate users.
| This is particularly useful in environments where users are already authenticated through another system, such as a corporate SSO or an identity provider.
| Please refer to the documentation of Wavelog for more details on how to set up and use this feature.
| Link to documentation: https://docs.wavelog.org/admin-guide/configuration/third-party-authentication
|
| 'auth_header_enable' = Enable or disable third-party authentication via HTTP headers.
| 'auth_header_create' = Automatically create a local user account if a valid access token is provided and no corresponding user exists.
| 'auth_allow_direct_login' = Allow users to log in directly through the Wavelog login form even when third-party authentication is enabled. This can be useful for administrators or in cases where some users do not have access to the SSO system.
| 'auth_headers_accesstoken' = The name of the HTTP header that contains the access token. This should match the header sent by your SSO or authentication system.
| 'auth_header_text' = The text displayed on the login button for third-party authentication.
| 'auth_header_club_id' = Optional club ID to assign to users authenticated via the header. This can be used to group users or assign specific permissions based on their club affiliation.
| 'auth_url_logout' = The URL to redirect users to when they log out, which can be used to log them out of the SSO system as well.
*/
// $config['auth_header_enable'] = false;
// $config['auth_header_create'] = true;
// $config['auth_allow_direct_login'] = true;
// $config['auth_headers_accesstoken'] = "HTTP_X_FORWARDED_ACCESS_TOKEN";
// $config['auth_header_text'] = "Login with SSO";
// $config['auth_header_club_id'] = "";
// $config['auth_url_logout'] = 'https://auth.example.org/realms/example/protocol/openid-connect/logout?post_logout_redirect_uri=https://log.example.org/index.php/user/login';
/*
|--------------------------------------------------------------------------

View File

@@ -119,15 +119,35 @@ $config['auth_mode'] = '3';
$config['auth_level'][3] = 'Operator';
$config['auth_level'][99] = 'Administrator';
$config['auth_header_enable'] = false;
$config['auth_header_create'] = false;
$config['auth_headers_username'] = "HTTP_X-Username";
$config['auth_headers_firstname'] = null;
$config['auth_headers_lastname'] = null;
$config['auth_headers_callsign'] = null;
$config['auth_headers_email'] = null;
$config['auth_header_text'] = "Login with SSO";
$config['auth_header_club_id'] = "";
/*
|--------------------------------------------------------------------------
| Third-Party Authentication (SSO)
|--------------------------------------------------------------------------
|
| This section defines settings for third-party authentication over an external identity provider.
| When enabled, Wavelog will look for a specific HTTP header containing an access token, which can be used to authenticate users.
| This is particularly useful in environments where users are already authenticated through another system, such as a corporate SSO or an identity provider.
| Please refer to the documentation of Wavelog for more details on how to set up and use this feature.
| Link to documentation: https://docs.wavelog.org/admin-guide/configuration/third-party-authentication
|
| 'auth_header_enable' = Enable or disable third-party authentication via HTTP headers.
| 'auth_header_create' = Automatically create a local user account if a valid access token is provided and no corresponding user exists.
| 'auth_allow_direct_login' = Allow users to log in directly through the Wavelog login form even when third-party authentication is enabled. This can be useful for administrators or in cases where some users do not have access to the SSO system.
| 'auth_headers_accesstoken' = The name of the HTTP header that contains the access token. This should match the header sent by your SSO or authentication system.
| 'auth_header_text' = The text displayed on the login button for third-party authentication.
| 'auth_header_club_id' = Optional club ID to assign to users authenticated via the header. This can be used to group users or assign specific permissions based on their club affiliation.
| 'auth_url_logout' = The URL to redirect users to when they log out, which can be used to log them out of the SSO system as well.
*/
// $config['auth_header_enable'] = false;
// $config['auth_header_create'] = true;
// $config['auth_allow_direct_login'] = true;
// $config['auth_headers_accesstoken'] = "HTTP_X_FORWARDED_ACCESS_TOKEN";
// $config['auth_header_text'] = "Login with SSO";
// $config['auth_header_club_id'] = "";
// $config['auth_url_logout'] = 'https://auth.example.org/realms/example/protocol/openid-connect/logout?post_logout_redirect_uri=https://log.example.org/index.php/user/login';
/*
|--------------------------------------------------------------------------