OIDC support

[WirtsLegs]

More and more homelabbers/self-hosters are deploying IDCs like authelia, authentic, keycloak, etc and as a result many projects now support OIDC for authentication, or atleast offer header-based auth so that the user can front the service with something that can do oidc

I would like to propose that, at least in the pro version (where multi-user support is added) you include OIDC support for authentication

[dohsimpson]

Header auth support is pretty easy to add, so I'll support that first. I have used authelia before for header auth, what SSO provider are you using?

[WirtsLegs]

Header auth support is pretty easy to add, so I'll support that first. I have used authelia before for header auth, what SSO provider are you using?

I use Keycloak, it does not support forward auth like authelia (though has a lot of other things I need that authelia doesn't support), i think authelia may be the only common 'homelab' IDC that offers forward auth making header-based auth trivial

For keycloak and other solutions it basically means sticking something like oauth2-Proxy infront of the service, it works but has a bit of jank and means doubling up on containers. Or can setup OIDC at the reverse proxy which can work well but has its own gotchas.

But yeah header auth atleast gives us a way to tie it to an SSO solution, id suggest making it so a authorized user via a header is created if not exists instead of forcing manual creation of users in TaskTrove before being able to use header auth.

[dohsimpson]

header-auth based SSO is added to TaskTrove Pro, it's an experimental feature at the moment, if you run into any issues please open up new issues. The set up doc is here: https://docs.tasktrove.io/sso-header-auth