gitea-admin/gh-christianlouis-dmarq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
531dc968a83bc907d8a14a6ca80d15011a06df53
gh-christianlouis-dmarq/backend/app/templates/setup.html
T
copilot-swe-agent[bot] 531dc968a8 feat: integrate Logto OIDC for user authentication 
- Add Logto OIDC integration (app/core/logto.py): CookieStorage adapter,
  create/decode session token helpers, sync_logto_user upsert
- New auth endpoints (/api/v1/auth): sign-in, callback, sign-out, me
- AuthRedirectMiddleware: protects HTML pages, redirects to /setup when
  Logto is unconfigured, to /login otherwise
- Update require_admin_auth: accepts dmarq_session cookie JWT first,
  then API key, then Bearer JWT (fully backward compatible)
- Update User model: add logto_id, username, picture, created_at, updated_at;
  make hashed_password nullable for Logto-only users; is_superuser default=True
- New Alembic migration d4e5f6a7b8c9 for the above schema changes
- Add LOGTO_ENDPOINT / LOGTO_APP_ID / LOGTO_APP_SECRET / LOGTO_REDIRECT_URI
  settings with logto_configured property
- Create login.html (Sign in with Logto button) and setup.html (step-by-step
  configuration guide)
- Update base.html: user menu with avatar/name and sign-out via Alpine.js
  fetch to /api/v1/auth/me
- Update settings.html: remove localStorage adminApiKey; session cookie is
  sent automatically by browser; add 401 → /login redirect
- Update requirements.txt: replace fastapi-users additions with logto + aiohttp
- Add test_auth.py: 18 new tests covering session tokens, CookieStorage,
  sync_logto_user, /me, /sign-in (503), /sign-out cookie clearing
- Fix test_security_extra.py: pass Request mock to require_admin_auth;
  add new test_valid_session_cookie_returns_auth_context

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b448f585-7646-40f8-ae2d-9986c361e3fd

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-30 10:09:50 +00:00

179 lines
8.4 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!DOCTYPE html>
<html lang="en" data-theme="dmarqlight">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Setup – {{ app_name }}</title>
<link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Open+Sans:wght@400;500;600&display=swap" rel="stylesheet">
<script src="https://cdn.tailwindcss.com"></script>
<link href="https://cdn.jsdelivr.net/npm/daisyui@4.12.24/dist/full.css" rel="stylesheet" type="text/css"/>
<script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
</head>
<body class="min-h-screen bg-base-200 font-sans antialiased">
<div class="max-w-3xl mx-auto px-4 py-12">
<!-- Logo / brand -->
<div class="text-center mb-10">
<a href="/" class="inline-flex items-center gap-3">
<img src="/static/img/monogram_light.png" alt="{{ app_name }} logo" class="w-12 h-12">
<span class="text-3xl font-bold text-primary font-heading">{{ app_name }}</span>
</a>
<h1 class="mt-3 text-2xl font-semibold">First-run Setup</h1>
<p class="mt-1 text-base-content/60 text-sm">Configure Logto to enable user authentication.</p>
</div>
{% if logto_configured %}
<!-- Already configured -->
<div class="card bg-base-100 shadow-xl mb-8">
<div class="card-body">
<div role="alert" class="alert alert-success">
<svg xmlns="http://www.w3.org/2000/svg" class="h-6 w-6 shrink-0" fill="none" viewBox="0 0 24 24" stroke="currentColor">
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7"/>
</svg>
<div>
<p class="font-semibold">Logto is configured!</p>
<p class="text-sm">Authentication is ready. You can now
<a href="/login" class="link link-success font-medium">sign in</a>.
</p>
</div>
</div>
</div>
</div>
{% endif %}
<!-- Step-by-step guide -->
<div class="space-y-6">
<!-- Step 1 -->
<div class="card bg-base-100 shadow">
<div class="card-body">
<h2 class="card-title text-lg">
<span class="badge badge-primary badge-lg mr-2">1</span>
Deploy or sign up for Logto
</h2>
<p class="text-sm text-base-content/70">
Choose one of the options below. Both are free to start.
</p>
<div class="grid grid-cols-1 sm:grid-cols-2 gap-4 mt-2">
<div class="border border-base-300 rounded-lg p-4 space-y-2">
<p class="font-semibold text-sm">☁️ Logto Cloud (recommended)</p>
<p class="text-xs text-base-content/60">
Sign up at
<a href="https://cloud.logto.io" target="_blank" rel="noopener" class="link link-primary">cloud.logto.io</a>.
The free tier supports unlimited users.
</p>
</div>
<div class="border border-base-300 rounded-lg p-4 space-y-2">
<p class="font-semibold text-sm">🐳 Self-hosted (Docker)</p>
<p class="text-xs text-base-content/60">
Add Logto to your <code class="font-mono">docker-compose.yml</code>
(see the
<a href="https://docs.logto.io/docs/recipes/deployment/" target="_blank" rel="noopener" class="link link-primary">Logto deployment guide</a>).
</p>
</div>
</div>
</div>
</div>
<!-- Step 2 -->
<div class="card bg-base-100 shadow">
<div class="card-body">
<h2 class="card-title text-lg">
<span class="badge badge-primary badge-lg mr-2">2</span>
Create a "Traditional Web" application in Logto
</h2>
<ol class="list-decimal list-inside text-sm text-base-content/70 space-y-1 mt-1">
<li>Open the <strong>Logto Console</strong> → <em>Applications</em> → <em>Create application</em>.</li>
<li>Choose <strong>Traditional Web</strong>.</li>
<li>Enter a name, e.g. <em>DMARQ</em>.</li>
<li>
Set the <strong>Redirect URI</strong> to:<br>
<code class="font-mono bg-base-200 px-2 py-0.5 rounded text-xs break-all">
&lt;your-dmarq-url&gt;/api/v1/auth/callback
</code>
</li>
<li>
Set the <strong>Post Sign-out Redirect URI</strong> to:<br>
<code class="font-mono bg-base-200 px-2 py-0.5 rounded text-xs break-all">
&lt;your-dmarq-url&gt;/login
</code>
</li>
<li>Save and note the <strong>App ID</strong> and <strong>App Secret</strong>.</li>
</ol>
</div>
</div>
<!-- Step 3 -->
<div class="card bg-base-100 shadow">
<div class="card-body">
<h2 class="card-title text-lg">
<span class="badge badge-primary badge-lg mr-2">3</span>
Set environment variables and restart {{ app_name }}
</h2>
<p class="text-sm text-base-content/70 mb-3">
Add the following to your <code class="font-mono">.env</code> file or Docker environment:
</p>
<div class="mockup-code text-xs">
<pre><code># Logto endpoint – the base URL of your Logto instance
LOGTO_ENDPOINT=https://&lt;your-tenant&gt;.logto.app
# Application credentials from the Logto Console
LOGTO_APP_ID=&lt;your-app-id&gt;
LOGTO_APP_SECRET=&lt;your-app-secret&gt;
# Optional: override the callback URL (defaults to &lt;base_url&gt;/api/v1/auth/callback)
# LOGTO_REDIRECT_URI=https://dmarc.example.com/api/v1/auth/callback</code></pre>
</div>
<div role="alert" class="alert alert-info mt-4 text-sm">
<svg xmlns="http://www.w3.org/2000/svg" class="h-5 w-5 shrink-0" fill="none" viewBox="0 0 24 24" stroke="currentColor">
<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 16h-1v-4h-1m1-4h.01M12 2a10 10 0 100 20A10 10 0 0012 2z"/>
</svg>
<p>
For Docker Compose, set these in the <code class="font-mono">environment:</code> section
of the <em>backend</em> service and run <code class="font-mono">docker compose up -d --force-recreate</code>.
</p>
</div>
</div>
</div>
<!-- Step 4 -->
<div class="card bg-base-100 shadow">
<div class="card-body">
<h2 class="card-title text-lg">
<span class="badge badge-primary badge-lg mr-2">4</span>
(Optional) Add authentication providers in Logto
</h2>
<p class="text-sm text-base-content/70">
Logto lets you enable social providers (Google, GitHub, Microsoft, …),
SMS / email passwordless, and multi-factor authentication entirely through
its console – no code changes needed in {{ app_name }}.
</p>
<p class="text-sm text-base-content/70 mt-2">
See the
<a href="https://docs.logto.io/docs/recipes/configure-connectors/" target="_blank" rel="noopener" class="link link-primary">Logto connector docs</a>
for details.
</p>
</div>
</div>
{% if logto_configured %}
<div class="text-center mt-4">
<a href="/login" class="btn btn-primary btn-lg">Go to Sign-in</a>
</div>
{% endif %}
</div><!-- /space-y-6 -->
</div>
<script>
(function () {
if (localStorage.getItem('darkMode') === 'true') {
document.documentElement.setAttribute('data-theme', 'dmarqdark');
}
})();
</script>
</body>
</html>
Reference in New Issue View Git Blame Copy Permalink