Bytebase UnAuth

A simple service to create bytebase login session (HTTP cookies) based on supplied HTTP headers. It was created to enable delegation of authentication to external service. See docker-compose.yml for reference on using caddy security plugin to delegate authentication to external OAuth2 provider.

HTTP Headers

• X-User-Email: the email of user. Should be unique.
• X-User-Name: the username of user. Should be unique.
• X-User-Role: the role assigned to the user. If multiple (comma separated) values are given, than it will use only the first one. If BYTEBASE_UNAUTH_GROUP_PREFIX environment variable is specified, then only prefixed value are choosen and the actual role name are extracted by removing the prefix, e.g. when prefix is bytebase/, then bytebase/owner become owner.

Environment Variables

• BYTEBASE_UNAUTH_PG_URL: the url to external postgres database. This should be the same as PG_URL used by bytebase.
• BYTEBASE_UNAUTH_LISTEN_ADDRESS: the listen address, default :8080.
• BYTEBASE_UNAUTH_CREATOR_ID: the existing user ID used for creating new user, default 101.
• BYTEBASE_UNAUTH_GROUP_PREFIX: as noted above.