External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(enterprise): add SSO enforcement mode with break-glass admin

Browse Source
This commit is contained in:
SnapOtter
2026-06-13 22:32:16 +08:00
parent 54132d1833
commit 0c4468a004
25 changed files with 82 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/web/src/hooks/use-auth.ts
+5
View File
@@ -16,6 +16,7 @@ interface AuthState {
oidcProviderName: string | null;
samlEnabled: boolean;
samlProviderName: string | null;
ssoEnforced: boolean;
loginMethod: string | null;
hasLocalPassword: boolean;
}
@@ -52,6 +53,7 @@ export function useAuth() {
oidcProviderName: null,
samlEnabled: false,
samlProviderName: null,
ssoEnforced: false,
loginMethod: null,
hasLocalPassword: false,
});
@@ -80,6 +82,7 @@ export function useAuth() {
oidcProviderName: null,
samlEnabled: false,
samlProviderName: null,
ssoEnforced: false,
loginMethod: null,
hasLocalPassword: false,
});
@@ -110,6 +113,7 @@ export function useAuth() {
oidcProviderName: config.oidcProviderName ?? null,
samlEnabled: config.samlEnabled ?? false,
samlProviderName: config.samlProviderName ?? null,
ssoEnforced: config.ssoEnforced ?? false,
loginMethod: session.user?.loginMethod ?? null,
hasLocalPassword: session.user?.hasLocalPassword ?? false,
});
@@ -130,6 +134,7 @@ export function useAuth() {
oidcProviderName: config.oidcProviderName ?? null,
samlEnabled: config.samlEnabled ?? false,
samlProviderName: config.samlProviderName ?? null,
ssoEnforced: config.ssoEnforced ?? false,
loginMethod: null,
hasLocalPassword: false,
});
apps/web/src/pages/login-page.tsx
+31 -3
View File
@@ -127,7 +127,7 @@ function LanguageSelector() {
export function LoginPage() {
const { t } = useTranslation();
const { oidcEnabled, oidcProviderName, samlEnabled, samlProviderName } = useAuth();
const { oidcEnabled, oidcProviderName, samlEnabled, samlProviderName, ssoEnforced } = useAuth();
const [searchParams] = useSearchParams();
const [username, setUsername] = useState("");
const [password, setPassword] = useState("");
@@ -191,7 +191,35 @@ export function LoginPage() {
</h1>
<h2 className="text-2xl font-bold mt-4 text-foreground">{t.auth.login}</h2>
</div>
<form onSubmit={handleSubmit} className="space-y-4">
{ssoEnforced && (oidcEnabled || samlEnabled) && (
<div className="space-y-3">
{oidcEnabled && (
<a
href="/api/auth/oidc/login"
className="w-full py-3 rounded-lg bg-primary/80 text-primary-foreground font-medium hover:bg-primary transition-colors flex items-center justify-center gap-2"
>
{format(t.auth.signInWith, { provider: oidcProviderName || "SSO" })}
</a>
)}
{samlEnabled && (
<a
href="/api/auth/saml/login"
className="w-full py-3 rounded-lg bg-primary/80 text-primary-foreground font-medium hover:bg-primary transition-colors flex items-center justify-center gap-2"
>
{format(t.auth.signInWith, { provider: samlProviderName || "SSO" })}
</a>
)}
<div className="flex items-center gap-3 my-4">
<div className="flex-1 border-t border-border" />
<span className="text-sm text-muted-foreground">{t.auth.or}</span>
<div className="flex-1 border-t border-border" />
</div>
<p className="text-sm text-muted-foreground text-center">
{t.auth.ssoEnforcedLocalRestricted}
</p>
</div>
)}
<form onSubmit={handleSubmit} className={`space-y-4${ssoEnforced ? " opacity-60" : ""}`}>
<div>
<label htmlFor="username" className="block text-sm font-medium mb-1 text-foreground">
{t.auth.username}
@@ -233,7 +261,7 @@ export function LoginPage() {
{loading ? t.auth.loggingIn : t.auth.loginButton}
</button>
</form>
{(oidcEnabled || samlEnabled) && (
{!ssoEnforced && (oidcEnabled || samlEnabled) && (
<>
<div className="flex items-center gap-3 my-4">
<div className="flex-1 border-t border-border" />