mirror of
https://github.com/nocobase/nocobase
synced 2024-11-15 20:16:58 +00:00
705b7449f0
* refactor: plugin manager page
* fix: bug
* feat: addByNpm api
* fix: improve the addByNpm
* feat: improve applicationPlugins:list api
* fix: re-download npm package when restart app
* fix: plugin delete api
* feat: plugin detail api
* feat: zipUrl add api
* fix: upload api bug
* fix: plugin detail info
* feat: upgrade api
* fix: upload api
* feat: handle plugin load error
* feat: support authToken
* feat: muti lang
* fix: build error
* fix: self review
* Update plugin-manager.ts
* fix: bug
* fix: bug
* fix: bug
* fix: bug
* fix: bug
* fix: bugs
* fix: detail click and remove isOfficial
* fix: upgrade no refresh
* fix: file size and type check
* fix: bug
* fix: upgrade error
* fix: bug
* fix: bug
* fix: plugin card layout
* fix: handling exceptional cases
* fix: tgz file support
* fix: macos compress file
* fix: bug
* fix: bug
* fix: bug
* fix: bug
* fix: add upgrade npm type
* fix: bugs
* fix: bug
* fix: change plugins static expose url
* fix: api prefix
* fix: bug
* fix: add nginx `/static/plugin/` path
* fix: bugs and pr docker build no dts
* fix: bug
* fix: build tools bug
* fix: improve code
* fix: build bug
* feat: improve plugin info
* fix: ui bug
* fix: plugin document bug
* feat: improve code
* feat: improve code
* feat: process dev deps check
* feat: improve code
* feat: process.env.IS_DEV_CMD
* fix: do not delete the plugin package
* feat: plugin symlink
* fix: tsx watch --ignore=./storage/plugins/**
* fix: test error
* fix: improve code
* fix: improve code
* fix: emitStartedEvent
* fix: improve code
* fix: type error
* fix: test error
* test: console.log
* fix: createStoragePluginSymLink
* fix: clientStaticMiddleware rename to clientStaticUtils
* feat: build tools support plugins folder
* fix: 350px
* fix: error
* feat: client dev support plugin folder
* fix: clear cli options
* fix: typeError: Converting circular structure to JSON
* fix: plugin name
* chore: restart application after command
* feat: upgrade error & docs
* Update v14-changelog.md
* Update v14-changelog.md
* Update v14-changelog.md
* fix: gateway test
* refactor(plugin-workflow): add ready state for gracefully tearing down
* Revert "chore: restart application after command"
This reverts commit 5015274f8e.
* chore: stop application whe restart
* T 1218 change plugin folder (#2629)
* feat: change folder name
* feat: change `pm create` command
* feat: revert plugin name change
* fix: delete samples
* feat: change plugins folder
* fix: pm create
* feat: update docs
* fix: link package error
* fix: docs
* fix: create command
* fix: pm add error
* fix: create add build
* fix: pm creatre + add
* feat: add tar command
* fix: docs
* fix: bug
* fix: docs
---------
Co-authored-by: chenos <chenlinxh@gmail.com>
* feat: docs
* Update your-fisrt-plugin.md
* Update your-fisrt-plugin.md
* chore: application reload
* chore: test
* fix: pm add error
* chore: preset install skip exists plugin
* fix: createIfNotExists
---------
Co-authored-by: chenos <chenlinxh@gmail.com>
Co-authored-by: chareice <chareice@live.com>
Co-authored-by: Zhou <zhou.working@gmail.com>
Co-authored-by: mytharcher <mytharcher@gmail.com>
39 lines
1.6 KiB
Markdown
39 lines
1.6 KiB
Markdown
# OIDC
|
||
提供标准Open ConnectID接入登录功能。
|
||
本插件登录流程使用**授权码模式 (Authorization Code Flow)**.
|
||
|
||
## 依赖
|
||
- `@nocobase/plugin-auth` 提供表，模型函数复用等
|
||
|
||
## 使用方法
|
||
> 以Sign in with Google为例
|
||
> https://developers.google.com/identity/openid-connect/openid-connect
|
||
|
||
### 获取Google OAuth 2.0凭据
|
||
[Google Cloud控制台](https://console.cloud.google.com/apis/credentials) - 创建凭据 - OAuth客户端ID
|
||
|
||
<img src="https://s2.loli.net/2023/06/19/8KPGut6noqgBlDL.png"/>
|
||
|
||
进入到配置界面，填写**授权重定向URL**. 重定向URL可以在Nocobase，新增认证器时获取，通常情况下为`http(s)://host:port/api/oidc:redirect`.
|
||
|
||
<img src="https://s2.loli.net/2023/06/19/cB1Mv3SAOa7H6Vb.png"/>
|
||
|
||
完成后复制**客户端ID**和**客户端密钥**。
|
||
|
||
### 在NocoBase上新增认证器
|
||
插件设置 - 认证 - 新增 - OIDC
|
||
|
||
<img src="https://s2.loli.net/2023/06/19/sBMURatC372GyEd.png"/>
|
||
依次填写
|
||
|
||
- Issuer - issuer由IdP提供，通常以`/.well-known/openid-configuration`结尾，Google的为[https://accounts.google.com/.well-known/openid-configuration](https://accounts.google.com/.well-known/openid-configuration)
|
||
- Client ID - 客户端ID
|
||
- Client Secret - 客户端密钥
|
||
- scope - 选填，默认为openid email profile
|
||
- id_token signed response algorithm - id_token的签名方法，默认为RS256
|
||
- HTTP - 回调地址是否为http协议，默认https
|
||
- Port - 回调地址端口，默认为443/80
|
||
- Field Map - 如果需要将用户相关字段映射，可以在这里配置，默认昵称为openid.
|
||
|
||
在有email的情况下，登录时将尝试匹配已有用户，否则创建新用户。
|