Declined
6
[Feature Request] App Authentication Flow for Mobile/Desktop Apps (Login Flow v2)
Source: paperless-ngx/paperless-ngx#11669 · opened by @ternes3
Description Primary idea: Enable mobile and desktop apps to securely obtain API tokens through a browser-based authentication flow - similar to [Nextcloud's Login Flow v2]( Currently, third-party apps like [PaperNext]( need users to manually create and copy API tokens when using SSO/OIDC. First idea: Login Flow v2 (Nextcloud-inspired) I propose implementing an app authentication flow inspired by Nextcloud's proven approach: API Endpoints | Endpoint | Method | Description | |----------|--------|-------------| | /api/app_auth/start/ | POST | Start auth flow, returns poll_token and login_url | | /api/app_auth/authorize/ | GET | Browser endpoint where user authenticates | | /api/app_auth/poll/ | POST | App polls with poll_token until auth completes | Why? First thoughts: Traditional OAuth requires server administrators to register each client application with a client_id and client_secret. How would a server admin get their OAuth credentials into …
No pledges yet. Be the first to back this.
Comments
Similar requests
[Feature Request] Bypass 2fa prompt for SSO logins
1 vote · 0 comments
[Feature Request] Websocket authentication via token
1 vote · 0 comments
[Feature Request] Add security-relevant logging for authentication and document share links
3 votes · 0 comments
[Feature Request] Include app logo in export
1 vote · 0 comments
[Feature Request] Optional WebSocket heartbeat to keep status connections alive behind reverse proxies / CDNs
1 vote · 0 comments
No comments yet.