Feature Request: Accounts improvement initiative #5847

From https://forums.meteor.com/t/accounts-improvement-initiative/63792/4

Meteor 3 WeKan Status

• Uses mquandalle-jade templates, ported to Meteor 3.
• Replacing hardcoded roles with Meteor Roles package? Feature Request: Granular Roles, create read only etc custom role permission combinations #3022 Add Feature: Only assigned cards visible when user permission is normal or comment only. #1122

Works

2. Logging Admin actions and 4. Impersonate user

• At Admin Panel / People / People, at user options / Impersonate user, it stays impersonated. After reloading webpage, it returns to original logged user, stopping impersonating.
• PR https://github.com/wekan/wekan/pulls?q=is%3Apr+is%3Aclosed+impersonate
• Logging actions of Admin that impersonated user to database collection/table impersonatedUsers 3908cd5
• Impersonate user button https://github.com/wekan/wekan/blob/main/client/components/settings/peopleBody.js#L1124
• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Impersonate-user.md

3. First user is Admin, next ones are Normal users

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Adding-users.md

Admin Panel: Disable self-registration, Disable forgot password, Invite users

• b85db43
• https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v0111-rc2-2017-03-05-wekan-prerelease
• Feature Suggestions: Invite Code, Deleting Users, and Default Frontpage #3310
• Environment specific: Unable to verify accounts. #1426
• The invitation code doesn't exist - case-sensitive eMail #1384

Disable password login

• PR hide password auth with PASSWORD_LOGIN_ENABLED variable #3014
• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Disable-Password-Login.md

Autologin with OIDC/OAUTH2

• PR Feature/direct login from OIDC #4588
• Commit 284f440
• Docs https://github.com/wekan/wekan/blob/main/docs/Login/autologin.md

Forgot password

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Forgot-Password.md

OAuth2 forked package

• https://github.com/wekan/wekan/tree/main/packages/wekan-oidc
• https://github.com/wekan/wekan/tree/main/packages/wekan-accounts-oidc

Login

• https://github.com/wekan/wekan/blob/main/client/components/main/layouts.js#L213

Create User

• https://github.com/wekan/wekan/blob/main/models/users.js#L1339

Azure AD B2C using OAuth2

• Commit 93be112
• Docs https://github.com/wekan/wekan/blob/main/docs/Login/B2C.md

Google Login

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Google-login.md

LDAP AD Simple Auth

• PR enable SimpleAuth for Active Directory #3909
• Docs https://github.com/wekan/wekan/blob/main/docs/Login/LDAP-AD-Simple-Auth.md

ADFS 4.0 using OAuth 2 and OpenID

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/ADFS.md
• Code https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v430-2020-09-13-wekan-release

OAuth2, RocketChat, Auth0, etc

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/OAuth2.md
• Feature Request: When using Auth0 login, redirect automatically to fullscreen Auth0 login page, instead of current login popup. #2211

Azure

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Azure/Azure.md

Nextcloud

• Code https://github.com/wekan/wekan/blob/main/docs/Login/Nextcloud.md
• [Feature Request] ownCloud / Nextcloud Integration #687

Oracle OIM with OAuth2 OIDC

• Commit ec8a785
• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Oracle-OIM.md

Improvements possible

Keycloak

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/Keycloak/Keycloak.md
• Environment specific: OpenID Connect with Keycloak Incorrect redirect_uri #3542

LDAP

• Docs https://github.com/wekan/wekan/blob/main/docs/Login/LDAP.md
• Seems to work LDAP connection to Windows AD user search issues #5844
• Better sync of users and teams like with this Python script? https://github.com/wekan/wekan/blob/main/docs/Login/ldap-sync/ldap-sync.py
• Add Feature: Teams/Organizations similar to Trello #802
• Environment specific: Wekan synchronizes groups in LDAP as if they were users #4875
• Environment specific: After user migration from password to LDAP, logins with multiple passwords possible #4419
• False Login Data are activating "Forgot Password and Register" #4394
• Import & sync groups from LDAP in teams menu #4104
• Environment specific: Can't anthenticate with user in LDAP_SYNC_ADMIN_GROUPS and not in LDAP_GROUP_FILTER_GROUP_NAME #4036
• Environment specific: LDAP users can't use API #3707
• Environment specific: LDAP groups read, but not used #3700

Fix OAUTH2_LOGIN_STYLE=redirect

• Currently only popup login works. It would help to have redirect login fixed, it would help with mobile login and popup blockers.
• Environment specific: OAUTH2_LOGIN_STYLE=redirect make fixes so that redirect would work #5695

1. Logout all sessions

• Logout does work, but there could be added some logout URL
• oidc: upon logout the oidc-session should be invalidated oidc: upon logout the oidc-session should be invalidated #5061
• Logout API ? Old tokens are not replaced or set invalid #1437
  • Using API with Python https://github.com/wekan/wekan/blob/main/api.py
  • API code at models directory https://github.com/wekan/wekan/tree/main/models
  • API docs at https://wekan.fi/api/ , created with this script https://github.com/wekan/wekan/blob/main/releases/rebuild-docs.sh

Brute force protection

• Check does it need fixes
• Feature Request: Login with Apple #2458
• Size reduction 23e5e1e
• Added back packages 00768b4

OAUTH2_CA_CERT does not work

• WeKan issue Environment specific: OAUTH2_CA_CERT does not work #5600

spring-authentication-server

• Environment specific: Errors occur when using spring-authentication-server as OIDC provider #5150
• Environment specific: Scope setting with OIDC method #5174

Unable to remove empty users from Board and Card members

• Unable to remove empty users from Board and Card members. #4847

Don't allow Oauth2 auth for users that don't already exist in the database

• Feature request: Don't allow Oauth2 auth for users that don't already exist in the database #4736

Web interface show differents data vs mongodb

• Web interface show differents data vs mongodb #4897

Performance issue: Changes in cards and boards are not immediately recorded

• Performance issue: Changes in cards and boards are not immediately recorded #4823

Cards not works properly after created by REST API

• Cards not works properly after created by REST API #4826

User Profile is reset when changing the authentication method from LDAP to OIDC

• Environment specific: User Profile is reset when changing the authentication method from LDAP to OIDC #4560

As WeKan administrator, I want a search by team name on the /people page to show me the users on a team

• As wekan administrator, I want a search by team name on the /people page to show me the users on a team. #4510

Login with HTTP headers

• Feature Request: 3rd party authentication server method #2019
• Enhancement/Fix: Login with HTTP headers #4311
• Security issue with proxy usage on Apache database  #3001

Impersonate user for REST API

• Impersonate User for REST API #5474

Login and Register page webhook

• Support for Login and register page webhook. #2290

TODO

Windows login SSPI

• Feature Request: Support for Single Sign-On (SSO) via Kerberos/NTLM or (IWA) #5758
• How to login to Linux desktop or website with AD (Active Directory) credentials? #4361

SAML

• Docs: https://github.com/wekan/wekan/blob/main/docs/Login/SAML.md
• Feature Request: SAML login for Standalone Wekan #708

CAS

• Docs: https://github.com/wekan/wekan/blob/main/docs/Login/CAS.md
• Login with CAS required custom changes, integrate directly to Wekan? #3204
• 214c86c
• Maybe RocketChat has CAS ?

Apple

• AtmosphereJS packages https://atmospherejs.com/?q=apple
• Feature Request: Login with Apple #2458

2FA

• AtmosphereJS package https://atmospherejs.com/meteor/accounts-2fa
• Two-factor authentication support (without using Google sign-in) #3058
• Maybe RocketChat has 2FA ?

LinkedIn

• AtmosphereJS packages https://atmospherejs.com/?q=linkedin

GitLab

• AtmosphereJS packages https://atmospherejs.com/?q=GitLab
• GitLab integration with Wekan Rules Sync #2698

SQRL

• Feature Request: Login with SQRL #2460

Bitbucket

• Feature Request: Bitbucket login #1324

MCP

• https://github.com/howinfo/howinfo/wiki/MCP