feat: add Casdoor single sign-on (#4222)

AlistGo · Apr 26, 2023 · 2bae8e1 · 2bae8e1
1 parent 9d55ad3
commit 2bae8e1
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 5 deletions.
diff --git a/internal/bootstrap/data/setting.go b/internal/bootstrap/data/setting.go
@@ -152,9 +152,13 @@ func InitialSettings() []model.SettingItem {
 
 		// SSO settings
 		{Key: conf.SSOLoginEnabled, Value: "false", Type: conf.TypeBool, Group: model.SSO, Flag: model.PUBLIC},
-		{Key: conf.SSOLoginplatform, Type: conf.TypeSelect, Options: "Github,Microsoft,Google,Dingtalk", Group: model.SSO, Flag: model.PUBLIC},
+		{Key: conf.SSOLoginplatform, Type: conf.TypeSelect, Options: "Casdoor,Github,Microsoft,Google,Dingtalk", Group: model.SSO, Flag: model.PUBLIC},
 		{Key: conf.SSOClientId, Value: "", Type: conf.TypeString, Group: model.SSO, Flag: model.PRIVATE},
 		{Key: conf.SSOClientSecret, Value: "", Type: conf.TypeString, Group: model.SSO, Flag: model.PRIVATE},
+		{Key: conf.SSOOrganizationName, Value: "", Type: conf.TypeString, Group: model.SSO, Flag: model.PRIVATE},
+		{Key: conf.SSOApplicationName, Value: "", Type: conf.TypeString, Group: model.SSO, Flag: model.PRIVATE},
+		{Key: conf.SSOEndpointName, Value: "", Type: conf.TypeString, Group: model.SSO, Flag: model.PRIVATE},
+		{Key: conf.SSOJwtPublicKey, Value: "", Type: conf.TypeString, Group: model.SSO, Flag: model.PRIVATE},
 
 		// qbittorrent settings
 		{Key: conf.QbittorrentUrl, Value: "http://admin:adminadmin@localhost:8080/", Type: conf.TypeString, Group: model.SINGLE, Flag: model.PRIVATE},

diff --git a/internal/conf/const.go b/internal/conf/const.go
@@ -55,10 +55,14 @@ const (
 	IndexProgress = "index_progress"
 
 	//SSO
-	SSOClientId      = "sso_client_id"
-	SSOClientSecret  = "sso_client_secret"
-	SSOLoginEnabled  = "sso_login_enabled"
-	SSOLoginplatform = "sso_login_platform"
+	SSOClientId         = "sso_client_id"
+	SSOClientSecret     = "sso_client_secret"
+	SSOLoginEnabled     = "sso_login_enabled"
+	SSOLoginplatform    = "sso_login_platform"
+	SSOOrganizationName = "sso_organization_name"
+	SSOApplicationName  = "sso_application_name"
+	SSOEndpointName     = "sso_endpoint_name"
+	SSOJwtPublicKey     = "sso_jwt_public_key"
 
 	// qbittorrent
 	QbittorrentUrl      = "qbittorrent_url"

diff --git a/server/handles/ssologin.go b/server/handles/ssologin.go
@@ -4,6 +4,7 @@ import (
 	"errors"
 	"fmt"
 	"net/url"
+	"strings"
 
 	"github.com/alist-org/alist/v3/internal/conf"
 	"github.com/alist-org/alist/v3/internal/db"
@@ -47,6 +48,11 @@ func SSOLoginRedirect(c *gin.Context) {
 			urlValues.Add("scope", "openid")
 			urlValues.Add("prompt", "consent")
 			urlValues.Add("response_type", "code")
+		case "Casdoor":
+			endpoint := strings.TrimSuffix(setting.GetStr(conf.SSOEndpointName), "/")
+			r_url = endpoint + "/login/oauth/authorize?"
+			urlValues.Add("scope", "read")
+			urlValues.Add("state", endpoint)
 		default:
 			common.ErrorStrResp(c, "invalid platform", 400)
 			return
@@ -94,6 +100,11 @@ func SSOLoginCallback(c *gin.Context) {
 			url2 = "https://api.dingtalk.com/v1.0/contact/users/me"
 			authstring = "authCode"
 			idstring = "unionId"
+		case "Casdoor":
+			endpoint := strings.TrimSuffix(setting.GetStr(conf.SSOEndpointName), "/")
+			url1 = endpoint + "/api/login/oauth/access_token"
+			url2 = endpoint + "/account"
+			authstring = "code"
 		default:
 			common.ErrorStrResp(c, "invalid platform", 400)
 			return