mirror of
https://github.com/awesome-foss/awesome-sysadmin.git
synced 2026-03-09 03:33:05 -05:00
[PR #619] Add VigiloAuth to Awesome-Sysadmin #1235
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Original Pull Request: https://github.com/awesome-foss/awesome-sysadmin/pull/619
State: closed
Merged: No
Thank you for taking the time to work on a PR for Awesome-Sysadmin!
To ensure your PR is dealt with swiftly please check the following:
DemoandClientsare optional.Do not add a duplicate
Source codelink if it is the same as the main link.Keep the short description under 80 characters and use sentence case
for it, even if the project's webpage or readme uses another capitalisation.
Demolinks should only be used for interactive demos, i.e. not video demonstrations.- [Name](http://homepage/) - Short description, under 250 characters, sentence case. ([Demo](http://url.to/demo), [Source Code](http://url.of/source/code), [Clients](https://url.to/list/of/related/clients-or-apps)) `License` `Language`Languagetag is the main server-side requirement for the software. Don't include frameworks or specific dialects.Suggested titles: "Add aaa to bbb" for adding software aaa to section bbb,
"Remove aaa from bbb" for removing, "Fix license for aaa", etc.
Please take some time to answer the following questions as best you can:
I think that it is awesome because it allows developer to have a fully customizable Identity/Auth server for their system. It also passed the OIDF Conformance tests and official certification is actively being pursued.
I haven't used it in a business/professional setting since it is still a work in progress. Most OAuth flows are fully functional but it is missing an admin UI and the Device code flow.
At the moment it is personal, but I am hoping that it will be used in a professional setting at one point.
None at the moment.
I think that the biggest pro compared to other solutions is that almost everything’s configurable: Token lifetimes, password policies, SMTP settings, rate limits, HTTPS enforcement, auth throttling. Basically tried to make it so you don't have to fork the code just to change basic behavior. The biggest con is that it is not a mature system, it's been thoroughly tested with the compliance tests, but it hasn't been "battle tested".