fuomag9
03c8f40417
CPM can now act as its own forward auth provider for proxied sites. Users authenticate at a login portal (credentials or OAuth) and Caddy gates access via a verify subrequest, eliminating the need for external IdPs like Authentik. Key components: - Forward auth flow: verify endpoint, exchange code callback, login portal - User groups with membership management - Per-proxy-host access control (users and/or groups) - Caddy config generation for forward_auth handler + callback route - OAuth and credential login on the portal page - Admin UI: groups page, inline user/group assignment in proxy host form - REST API: /api/v1/groups, /api/v1/forward-auth-sessions, per-host access - Integration tests for groups and forward auth schema Also fixes mTLS E2E test selectors broken by the RBAC refactor. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
17 lines
529 B
TypeScript
17 lines
529 B
TypeScript
import GroupsClient from "./GroupsClient";
|
|
import { listGroups } from "@/src/lib/models/groups";
|
|
import { listUsers } from "@/src/lib/models/user";
|
|
import { requireAdmin } from "@/src/lib/auth";
|
|
|
|
export default async function GroupsPage() {
|
|
await requireAdmin();
|
|
const [allGroups, allUsers] = await Promise.all([listGroups(), listUsers()]);
|
|
const userList = allUsers.map((u) => ({
|
|
id: u.id,
|
|
email: u.email,
|
|
name: u.name,
|
|
role: u.role,
|
|
}));
|
|
return <GroupsClient groups={allGroups} users={userList} />;
|
|
}
|