705b7449f0
* refactor: plugin manager page * fix: bug * feat: addByNpm api * fix: improve the addByNpm * feat: improve applicationPlugins:list api * fix: re-download npm package when restart app * fix: plugin delete api * feat: plugin detail api * feat: zipUrl add api * fix: upload api bug * fix: plugin detail info * feat: upgrade api * fix: upload api * feat: handle plugin load error * feat: support authToken * feat: muti lang * fix: build error * fix: self review * Update plugin-manager.ts * fix: bug * fix: bug * fix: bug * fix: bug * fix: bug * fix: bugs * fix: detail click and remove isOfficial * fix: upgrade no refresh * fix: file size and type check * fix: bug * fix: upgrade error * fix: bug * fix: bug * fix: plugin card layout * fix: handling exceptional cases * fix: tgz file support * fix: macos compress file * fix: bug * fix: bug * fix: bug * fix: bug * fix: add upgrade npm type * fix: bugs * fix: bug * fix: change plugins static expose url * fix: api prefix * fix: bug * fix: add nginx `/static/plugin/` path * fix: bugs and pr docker build no dts * fix: bug * fix: build tools bug * fix: improve code * fix: build bug * feat: improve plugin info * fix: ui bug * fix: plugin document bug * feat: improve code * feat: improve code * feat: process dev deps check * feat: improve code * feat: process.env.IS_DEV_CMD * fix: do not delete the plugin package * feat: plugin symlink * fix: tsx watch --ignore=./storage/plugins/** * fix: test error * fix: improve code * fix: improve code * fix: emitStartedEvent * fix: improve code * fix: type error * fix: test error * test: console.log * fix: createStoragePluginSymLink * fix: clientStaticMiddleware rename to clientStaticUtils * feat: build tools support plugins folder * fix: 350px * fix: error * feat: client dev support plugin folder * fix: clear cli options * fix: typeError: Converting circular structure to JSON * fix: plugin name * chore: restart application after command * feat: upgrade error & docs * Update v14-changelog.md * Update v14-changelog.md * Update v14-changelog.md * fix: gateway test * refactor(plugin-workflow): add ready state for gracefully tearing down * Revert "chore: restart application after command" This reverts commit 5015274f8e4e06e506e15754b672330330e8c7f8. * chore: stop application whe restart * T 1218 change plugin folder (#2629) * feat: change folder name * feat: change `pm create` command * feat: revert plugin name change * fix: delete samples * feat: change plugins folder * fix: pm create * feat: update docs * fix: link package error * fix: docs * fix: create command * fix: pm add error * fix: create add build * fix: pm creatre + add * feat: add tar command * fix: docs * fix: bug * fix: docs --------- Co-authored-by: chenos <chenlinxh@gmail.com> * feat: docs * Update your-fisrt-plugin.md * Update your-fisrt-plugin.md * chore: application reload * chore: test * fix: pm add error * chore: preset install skip exists plugin * fix: createIfNotExists --------- Co-authored-by: chenos <chenlinxh@gmail.com> Co-authored-by: chareice <chareice@live.com> Co-authored-by: Zhou <zhou.working@gmail.com> Co-authored-by: mytharcher <mytharcher@gmail.com>
39 lines
1.6 KiB
Markdown
39 lines
1.6 KiB
Markdown
# OIDC
|
||
提供标准Open ConnectID接入登录功能。
|
||
本插件登录流程使用**授权码模式 (Authorization Code Flow)**.
|
||
|
||
## 依赖
|
||
- `@nocobase/plugin-auth` 提供表，模型函数复用等
|
||
|
||
## 使用方法
|
||
> 以Sign in with Google为例
|
||
> https://developers.google.com/identity/openid-connect/openid-connect
|
||
|
||
### 获取Google OAuth 2.0凭据
|
||
[Google Cloud控制台](https://console.cloud.google.com/apis/credentials) - 创建凭据 - OAuth客户端ID
|
||
|
||
<img src="https://s2.loli.net/2023/06/19/8KPGut6noqgBlDL.png"/>
|
||
|
||
进入到配置界面，填写**授权重定向URL**. 重定向URL可以在Nocobase，新增认证器时获取，通常情况下为`http(s)://host:port/api/oidc:redirect`.
|
||
|
||
<img src="https://s2.loli.net/2023/06/19/cB1Mv3SAOa7H6Vb.png"/>
|
||
|
||
完成后复制**客户端ID**和**客户端密钥**。
|
||
|
||
### 在NocoBase上新增认证器
|
||
插件设置 - 认证 - 新增 - OIDC
|
||
|
||
<img src="https://s2.loli.net/2023/06/19/sBMURatC372GyEd.png"/>
|
||
依次填写
|
||
|
||
- Issuer - issuer由IdP提供，通常以`/.well-known/openid-configuration`结尾，Google的为[https://accounts.google.com/.well-known/openid-configuration](https://accounts.google.com/.well-known/openid-configuration)
|
||
- Client ID - 客户端ID
|
||
- Client Secret - 客户端密钥
|
||
- scope - 选填，默认为openid email profile
|
||
- id_token signed response algorithm - id_token的签名方法，默认为RS256
|
||
- HTTP - 回调地址是否为http协议，默认https
|
||
- Port - 回调地址端口，默认为443/80
|
||
- Field Map - 如果需要将用户相关字段映射，可以在这里配置，默认昵称为openid.
|
||
|
||
在有email的情况下，登录时将尝试匹配已有用户，否则创建新用户。
|