SSO group sync & verification #161

New Issue

Open

opened 2024-04-26 12:54:46 +00:00 by b12f · 1 comment

b12f commented

2024-04-26 12:54:46 +00:00

Owner

The same applies to Data volumes in Nextcloud. These are currently capped to 10MB by default, but for verified users, we could increase this to e.g. 5GB.

To enable emailing, we'd need to be able to verify users as real. Otherwise our open registration will just lead to spambots using pub.solar email addresses for free. One way to do this would be to have a "verified" group in keycloak, which gets the right to send emails. The same applies to Data volumes in Nextcloud. These are currently capped to 10MB by default, but for verified users, we could increase this to e.g. 5GB.

b12f added the

Feature request

label 2024-04-26 13:03:37 +00:00

janhaa commented

2024-04-26 14:25:43 +00:00

Keycloak Server Providers could be considered for this - they allow Keycloak to extend its own functionalities:

https://www.keycloak.org/docs/latest/server_development/#_providers

It would be possible to implement an EventListener SPI:
https://www.keycloak.org/docs/latest/server_development/#_events

Then, one could use groups to mark authorized users and tap into the GROUP_MEMBERSHIP CREATE event to subsequently call the Nextcloud, etc. APIs based on this.

Keycloak Server Providers could be considered for this - they allow Keycloak to extend its own functionalities: https://www.keycloak.org/docs/latest/server_development/#_providers It would be possible to implement an EventListener SPI: https://www.keycloak.org/docs/latest/server_development/#_events Then, one could use groups to mark authorized users and tap into the GROUP_MEMBERSHIP CREATE event to subsequently call the Nextcloud, etc. APIs based on this.

👀 1