Oauth (via socialite)

[Boy132]

https://laravel.com/docs/11.x/socialite
https://socialiteproviders.com/

• Backend (Add OAuth backend #386)
• Frontend
• Add more providers (e.g. authentik, google, microsoft, steam)
• Make it easier to add additional providers (without code edit)

[KeySC07]

Would be nice to see an option for JIT(Just-In-Time) provisioning added to create users upon sign-in via SSO.

[timoschirmer]

Would love to see support for authentik or some kind of generic oauth2 provider in the future.

[KeySC07]

Would love to see support for authentik or some kind of generic oauth2 provider in the future.

Authentik is already supported see here https://socialiteproviders.com/Authentik/#installation-basic-usage
just gotta make some changes to get it working.

[KeySC07]

Would be nice to see enforce MFA as an option as well.

Using the amr attribute within the OAuth token contains the types auth the user has completed
at the identity provider, an example:
"amr": [
"pwd",
"mfa"
],

You could use this to add an option to enforce MFA which would deny the login if the amr token doesn't contain "mfa".