CloudNebulaProject/wayray
1
0
Fork 0
mirror of https://github.com/CloudNebulaProject/wayray.git synced 2026-04-10 21:20:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Hot Desking in Wayland - mirror
6 commits 1 branch 0 tags 559 KiB
Find a file
Till Wegmueller a04c04a22c
Add ADR-012: Cloud authentication via OAuth/OIDC greeter 
The greeter bridges cloud identity to local user context:
- Device Authorization Grant (RFC 8628) as recommended flow
  for thin clients (QR code, no browser needed on server)
- Authorization Code with PKCE as alternative
- Claims-to-user mapping (IdP sub/email/groups -> local uid/gids)
- Auto-provisioning on first login (useradd, ZFS home dataset)
- Pluggable auth architecture (local, OIDC, smart card, Kerberos)
- Ephemeral pre-auth session for greeter display
- Session launcher interface unchanged regardless of auth method
2026-03-28 23:17:54 +01:00
book Add project documentation, architecture decisions, and usage book 2026-03-28 20:47:16 +01:00
docs Add ADR-012: Cloud authentication via OAuth/OIDC greeter 2026-03-28 23:17:54 +01:00
src Initial commit 2026-03-28 18:53:00 +01:00
.gitignore Initial commit 2026-03-28 18:53:00 +01:00
Cargo.toml Initial commit 2026-03-28 18:53:00 +01:00
CLAUDE.md Add greeter/session-launch architecture, clarify scope boundary 2026-03-28 21:35:18 +01:00
RESEARCH.md Add project documentation, architecture decisions, and usage book 2026-03-28 20:47:16 +01:00