Aurion SSO

This app is used by Hydra to authenticate users. It ensure 0K connexion and never share the main password.

For more details, see docs repo

Development

• npm install
• npm run dev

Build

• npm install
• npm run build

Env

PORT=3030
BASE_URL=https://sso.aurionmail.org
HYDRA_ADMIN_URL=http://localhost:4445
# Only used in paid version of Ory Hydra
ORY_API_KEY=YOUR_API_KEY
# LDAP
LDAP_URL=ldap://127.0.0.1:3890
LDAP_USER_DN_PATTERN=uid={username},ou=people,dc=aurionmail,dc=org
WEBMAIL_DOMAIN_WP=https://officialweb.mail.aurionmail.org
CRYPTPAD_DOMAIN_WP=https://pad.aurionmail.org
CORE_API_URL=https://aurion.mail.aurionmail.org
CORE_API_INTERNAL_SECRET=ezfeoizrourefgzerrvettyojuipytfdesdzstrye

Note for admins

• Once account is created with your usual workflow, users need to go to sso.domain/init to activate their account.
• you can give to your users link like this https://sso.domain/init?username=john.doe&tempPassword=TempSecret123 to fill username and password fields.