Accounts improvement initiative

xet7 · July 27, 2025, 5:02pm

Related WeKan info:

Feature Request: Accounts improvement initiative

opened 06:06PM - 27 Jul 25 UTC

Feature:User-accounts

From https://forums.meteor.com/t/accounts-improvement-initiative/63792/4 # Mete…or 2 WeKan Status - Uses mquandalle-jade templates. No Meteor 3 Jade package yet. - Does Meteor-Files/ostrio-files work with Meteor 3, for uploading files etc? - Rendering order sometimes does not show translations correctly - Replacing hardcoded roles with Meteor Roles package? WeKan issue Granular Roles: https://github.com/wekan/wekan/issues/3022 ---- # Works ### 2. Logging Admin actions and 4. Impersonate user - At Admin Panel / People / People, at user options / Impersonate user, it stays impersonated. After reloading webpage, it returns to original logged user, stopping impersonating. - PR https://github.com/wekan/wekan/pulls?q=is%3Apr+is%3Aclosed+impersonate - Logging actions of Admin that impersonated user to database collection/table impersonatedUsers https://github.com/wekan/wekan/commit/3908cd5413b775d1ee549f0a95304cf9998d3855 - Impersonate user button https://github.com/wekan/wekan/blob/main/client/components/settings/peopleBody.js#L1124 - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Impersonate-user.md ### 3. First user is Admin, next ones are Normal users - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Adding-users.md ### Admin Panel: Disable self-registration, Disable forgot password, Invite users - https://github.com/wekan/wekan/commit/b85db43c4755cf54e550f664311cd95097d68ae1 - https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v0111-rc2-2017-03-05-wekan-prerelease ### Disable password login - PR https://github.com/wekan/wekan/pull/3014 - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Disable-Password-Login.md ### Autologin with OIDC/OAUTH2 - PR https://github.com/wekan/wekan/pull/4588 - Commit https://github.com/wekan/wekan/commit/284f4401369aadcec72e67fa935dfc3a9fead721 - Docs https://github.com/wekan/wekan/blob/main/docs/Login/autologin.md ### Forgot password - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Forgot-Password.md ### OAuth2 forked package - https://github.com/wekan/wekan/tree/main/packages/wekan-oidc - https://github.com/wekan/wekan/tree/main/packages/wekan-accounts-oidc ### Login - https://github.com/wekan/wekan/blob/main/client/components/main/layouts.js#L213 ### Create User - https://github.com/wekan/wekan/blob/main/models/users.js#L1339 ### Azure AD B2C using OAuth2 - Commit https://github.com/wekan/wekan/commit/93be112a9454c894c1ce3146ed377e6a6aeca64a - Docs https://github.com/wekan/wekan/blob/main/docs/Login/B2C.md ### Google Login - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Google-login.md ### LDAP AD Simple Auth - PR https://github.com/wekan/wekan/pull/3909 - Docs https://github.com/wekan/wekan/blob/main/docs/Login/LDAP-AD-Simple-Auth.md ### ADFS 4.0 using OAuth 2 and OpenID - Docs https://github.com/wekan/wekan/blob/main/docs/Login/ADFS.md - Code https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v430-2020-09-13-wekan-release ### OAuth2, RocketChat, Auth0, etc - Docs https://github.com/wekan/wekan/blob/main/docs/Login/OAuth2.md ### Azure - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Azure/Azure.md ### Nextcloud - Code https://github.com/wekan/wekan/blob/main/docs/Login/Nextcloud.md ### Keycloak - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Keycloak/Keycloak.md ### Oracle OIM with OAuth2 OIDC - Commit https://github.com/wekan/wekan/commit/ec8a78537f1dc40e967de36a02ea09cf7398318a - Docs https://github.com/wekan/wekan/blob/main/docs/Login/Oracle-OIM.md ---- # Improvements possible ### LDAP - Docs https://github.com/wekan/wekan/blob/main/docs/Login/LDAP.md - Seems to work https://github.com/wekan/wekan/issues/5844 - TODO: Better sync of users and teams like with this Python script? https://github.com/wekan/wekan/blob/main/docs/Login/ldap-sync/ldap-sync.py ### Fix OAUTH2_LOGIN_STYLE=redirect - Currently only popup login works. It would help to have redirect login fixed, it would help with mobile login and popup blockers. - Issue https://github.com/wekan/wekan/issues/5695 ### 1. Logout all sessions - Logout does work, but there could be added some logout URL - oidc: upon logout the oidc-session should be invalidated https://github.com/wekan/wekan/issues/5061 - Logout API ? https://github.com/wekan/wekan/issues/1437 - Using API with Python https://github.com/wekan/wekan/blob/main/api.py - API code at models directory https://github.com/wekan/wekan/tree/main/models - API docs at https://wekan.fi/api/ , created with this script https://github.com/wekan/wekan/blob/main/releases/rebuild-docs.sh ### Brute force protection - Check does it need fixes - https://github.com/wekan/wekan/issues/2458 - Size reduction https://github.com/wekan/wekan/commit/23e5e1e3bd081699ce39ce5887db7e612616014d - Added back packages https://github.com/wekan/wekan/commit/00768b4392109dec62a4dcf44dbceb295990d785 ### `OAUTH2_CA_CERT` does not work - WeKan issue https://github.com/wekan/wekan/issues/5600 ### spring-authentication-server - https://github.com/wekan/wekan/issues/5150 - https://github.com/wekan/wekan/issues/5174 ---- # TODO ### Windows login SSPI - Issue https://github.com/wekan/wekan/issues/5758 ### SAML - Docs: https://github.com/wekan/wekan/blob/main/docs/Login/SAML.md ### CAS - Docs: https://github.com/wekan/wekan/blob/main/docs/Login/CAS.md - Maybe RocketChat has CAS ? ### Apple Login - AtmosphereJS packages https://atmospherejs.com/?q=apple - WeKan issue https://github.com/wekan/wekan/issues/2458 ### 2FA - AtmosphereJS package https://atmospherejs.com/meteor/accounts-2fa ### LinkedIn - AtmosphereJS packages https://atmospherejs.com/?q=linkedin ### GitLab - AtmosphereJS packages https://atmospherejs.com/?q=GitLab ### MCP - https://github.com/howinfo/howinfo/wiki/MCP