From b99828c4f633676495859c11160c824adf333192 Mon Sep 17 00:00:00 2001 From: Dimitri Huisman Date: Wed, 15 Mar 2023 16:04:30 +0000 Subject: [PATCH] Fix broken link. Add extra clarification for login targets. --- docs/configuration.rst | 8 +++++++- towncrier/newsfragments/2692.misc | 6 +++++- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/docs/configuration.rst b/docs/configuration.rst index aec62a8f..645cd85d 100644 --- a/docs/configuration.rst +++ b/docs/configuration.rst @@ -375,7 +375,13 @@ The ``PROXY_AUTH_WHITELIST`` (default: unset/disabled) option allows you to conf Use ``PROXY_AUTH_HEADER`` (default: 'X-Auth-Email') to customize which HTTP header the email address of the user to authenticate as should be and ``PROXY_AUTH_CREATE`` (default: False) to control whether non-existing accounts should be auto-created. Please note that Mailu doesn't currently support creating new users for non-existing domains; you do need to create all the domains that may be used manually. -Once configured, any request to /sso/login with the correct headers will be authenticated unless the "noproxyauth" parameter is passed, in which case the "standard" login form will be displayed. Please check issues `1972` and `2692` for more details. +Once configured, any request to /sso/login with the correct headers will be authenticated unless the "noproxyauth" parameter is passed, in which case the "standard" login form will be displayed. Please check issues `1972`_ and `2692`_ for more details. + +Requests to: + +- "/sso/login" results the user being redirected to the web administration interface after authentication. +- "/admin" (``WEB_ADMIN=/admin``) results the user being redirected to the web administration interface after authentication. +- "/webmail" (``WEB_WEBMAIL=/webmail``) results the user being redirected to the web administration interface after authentication. Use ``PROXY_AUTH_LOGOUT_URL`` (default: unset) to redirect users to a specific URL after they have been logged out. diff --git a/towncrier/newsfragments/2692.misc b/towncrier/newsfragments/2692.misc index 30d73843..9342c06b 100644 --- a/towncrier/newsfragments/2692.misc +++ b/towncrier/newsfragments/2692.misc @@ -1,3 +1,7 @@ -Make the login page "guess" where the user wants to land +Make the login page "guess" where the user wants to land. +This means that requests for /admin result in a login page that always redirects to admin. +Requests for /webmail results in a login page that redirects the user being logged in to webmail. +You can still access / (https://mydomain/) or /sso/login, to access the login page with both login buttons. + Introduce AUTH_PROXY_LOGOUT_URL to redirect users to a specific URL after they have been logged-out Retire /sso/proxy and merge it in /sso/login