Skip to content

sanderevers/solidsea

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Solidsea

A simple OIDC provider that federates to other identity providers over OAuth1/OAuth2/OIDC. Solidsea does not use a database/keystore; all state needed for the authentication flow is either kept on the client using session cookie or encrypted into the authorization code. This makes Solidsea very easy to deploy (and scale).

Out of the box, Solidsea federates to Github, Google and Twitter (when provided with client credentials). This can be extended to other providers without altering the source code.

When a user is directed to the /authorize endpoint, Solidsea shows an (adaptable) choice screen. If a ?federate=github parameter is added, this screen is skipped.

This software is not related to the eponymous Danish pop group.

Note on security

Solidsea is in a hobby phase. As with all open source software, no guarantees are given. Most protocol functionality is handled by Authlib which I deem quite trustworthy.

About

Stateless OIDC provider

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published