Improve readme
This commit is contained in:
parent
f87df5204e
commit
5ae0be505d
48
README.md
48
README.md
@ -1,5 +1,13 @@
|
|||||||
# HTTP JSON REST Authenticator module for synapse
|
# Synapse REST Password provider
|
||||||
This synapse authentication module (password provider) allows you to query identity data in existing webapps, like:
|
- [Overview](#overview)
|
||||||
|
- [Install](#install)
|
||||||
|
- [Configure](#configure)
|
||||||
|
- [Integrate](#integrate)
|
||||||
|
- [Support](#support)
|
||||||
|
|
||||||
|
## Overview
|
||||||
|
This synapse's password provider allows you to validate a password for a given username and return a user profile using
|
||||||
|
an existing backend, like:
|
||||||
- Forums (phpBB, Discourse, etc.)
|
- Forums (phpBB, Discourse, etc.)
|
||||||
- Custom Identity stores (Keycloak, ...)
|
- Custom Identity stores (Keycloak, ...)
|
||||||
- CRMs (Wordpress, ...)
|
- CRMs (Wordpress, ...)
|
||||||
@ -8,6 +16,10 @@ This synapse authentication module (password provider) allows you to query ident
|
|||||||
It is mainly used with [mxisd](https://github.com/kamax-matrix/mxisd), the Federated Matrix Identity Server, to provide
|
It is mainly used with [mxisd](https://github.com/kamax-matrix/mxisd), the Federated Matrix Identity Server, to provide
|
||||||
missing features and offer a fully integrated solution (directory, authentication, search).
|
missing features and offer a fully integrated solution (directory, authentication, search).
|
||||||
|
|
||||||
|
**NOTE:** This module doesn't provide direct integration with any backend. If you do not use mxisd, you will need to write
|
||||||
|
your own backend, following the [Integration section](#integrate). This module simply translate an anthentication result
|
||||||
|
and profile information into actionables in synapse, and adapt your user profile with what is given.
|
||||||
|
|
||||||
## Install
|
## Install
|
||||||
### From Synapse v0.34.0/py3
|
### From Synapse v0.34.0/py3
|
||||||
Copy in whichever directory python3.x can pick it up as a module.
|
Copy in whichever directory python3.x can pick it up as a module.
|
||||||
@ -16,6 +28,7 @@ If you installed synapse using the Matrix debian repos:
|
|||||||
```
|
```
|
||||||
sudo curl https://raw.githubusercontent.com/kamax-matrix/matrix-synapse-rest-auth/master/rest_auth_provider.py -o /opt/venvs/matrix-synapse/lib/python3.5/site-packages/rest_auth_provider.py
|
sudo curl https://raw.githubusercontent.com/kamax-matrix/matrix-synapse-rest-auth/master/rest_auth_provider.py -o /opt/venvs/matrix-synapse/lib/python3.5/site-packages/rest_auth_provider.py
|
||||||
```
|
```
|
||||||
|
If the command fail, double check that the python version still matches. If not, please let us know by opening an issue.
|
||||||
|
|
||||||
### Before Synapse v0.34.0/py3 or any py2-based release
|
### Before Synapse v0.34.0/py3 or any py2-based release
|
||||||
Copy in whichever directory python2.x can pick it up as a module.
|
Copy in whichever directory python2.x can pick it up as a module.
|
||||||
@ -24,10 +37,11 @@ If you installed synapse using the Matrix debian repos:
|
|||||||
```
|
```
|
||||||
sudo curl https://raw.githubusercontent.com/kamax-matrix/matrix-synapse-rest-auth/master/rest_auth_provider.py -o /usr/lib/python2.7/dist-packages/rest_auth_provider.py
|
sudo curl https://raw.githubusercontent.com/kamax-matrix/matrix-synapse-rest-auth/master/rest_auth_provider.py -o /usr/lib/python2.7/dist-packages/rest_auth_provider.py
|
||||||
```
|
```
|
||||||
|
If the command fail, double check that the python version still matches. If not, please let us know by opening an issue.
|
||||||
|
|
||||||
## Configure
|
## Configure
|
||||||
Add or amend the `password_providers` entry like so:
|
Add or amend the `password_providers` entry like so:
|
||||||
```
|
```yaml
|
||||||
password_providers:
|
password_providers:
|
||||||
- module: "rest_auth_provider.RestAuthProvider"
|
- module: "rest_auth_provider.RestAuthProvider"
|
||||||
config:
|
config:
|
||||||
@ -47,8 +61,7 @@ To avoid creating users accounts with uppercase characters in their usernames an
|
|||||||
issues regarding case sensitivity in synapse, attempting to login with such username will fail.
|
issues regarding case sensitivity in synapse, attempting to login with such username will fail.
|
||||||
|
|
||||||
It is highly recommended to keep this feature enable, but in case you would like to disable it:
|
It is highly recommended to keep this feature enable, but in case you would like to disable it:
|
||||||
```
|
```yaml
|
||||||
[...]
|
|
||||||
config:
|
config:
|
||||||
policy:
|
policy:
|
||||||
registration:
|
registration:
|
||||||
@ -62,8 +75,7 @@ If none is given, the display name is not set.
|
|||||||
Upon subsequent login, the display name is not changed.
|
Upon subsequent login, the display name is not changed.
|
||||||
|
|
||||||
If you would like to change the behaviour, you can use the following configuration items:
|
If you would like to change the behaviour, you can use the following configuration items:
|
||||||
```
|
```yaml
|
||||||
[...]
|
|
||||||
config:
|
config:
|
||||||
policy:
|
policy:
|
||||||
registration:
|
registration:
|
||||||
@ -90,7 +102,7 @@ To use this module with your back-end, you will need to implement a single REST
|
|||||||
Path: `/_matrix-internal/identity/v1/check_credentials`
|
Path: `/_matrix-internal/identity/v1/check_credentials`
|
||||||
Method: POST
|
Method: POST
|
||||||
Body as JSON UTF-8:
|
Body as JSON UTF-8:
|
||||||
```
|
```json
|
||||||
{
|
{
|
||||||
"user": {
|
"user": {
|
||||||
"id": "@matrix.id.of.the.user:example.com",
|
"id": "@matrix.id.of.the.user:example.com",
|
||||||
@ -99,12 +111,12 @@ Body as JSON UTF-8:
|
|||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
The following JSON answer will be provided:
|
If the credentials are accepted, the following JSON answer will be provided:
|
||||||
```
|
```json
|
||||||
{
|
{
|
||||||
"auth": {
|
"auth": {
|
||||||
"success": <boolean>
|
"success": true,
|
||||||
"mxid": "@matrix.id.of.the.user:example.com"
|
"mxid": "@matrix.id.of.the.user:example.com",
|
||||||
"profile": {
|
"profile": {
|
||||||
"display_name": "John Doe",
|
"display_name": "John Doe",
|
||||||
"three_pids": [
|
"three_pids": [
|
||||||
@ -121,6 +133,18 @@ The following JSON answer will be provided:
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
`auth.profile` and any sub-key are optional.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
If the credentials are refused, the following JSON answer will be provided:
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"auth": {
|
||||||
|
"success": false
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
## Support
|
## Support
|
||||||
For community support, visit our Matrix room [#matrix-synapse-rest-auth:kamax.io](https://matrix.to/#/#matrix-synapse-rest-auth:kamax.io)
|
For community support, visit our Matrix room [#matrix-synapse-rest-auth:kamax.io](https://matrix.to/#/#matrix-synapse-rest-auth:kamax.io)
|
||||||
|
Loading…
Reference in New Issue
Block a user