From 502ff7567e2056b8e7545b3210b214f867844f74 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?P=C4=93teris=20Caune?=
To enable this feature, set the REMOTE_USER_HEADER
value to a header you wish to authenticate with. HTTP headers will be prefixed with HTTP_
and have any dashes converted to underscores. Headers without that prefix can be set by the WSGI server itself only, which is more secure.
When REMOTE_USER_HEADER
is set, Healthchecks will:
- - assume the header contains user's email address
- - look up and automatically log in the user with a matching email address
- - automatically create an user account if it does not exist
- - disable the default authentication methods (login link to email, password)
When REMOTE_USER_HEADER
is set, Healthchecks will:
RP_ID
Default: None
The Relying Party identifier, diff --git a/templates/docs/self_hosted_configuration.md b/templates/docs/self_hosted_configuration.md index 423feb64..17d4376e 100644 --- a/templates/docs/self_hosted_configuration.md +++ b/templates/docs/self_hosted_configuration.md @@ -382,6 +382,7 @@ existing authentication system (e.g., LDAP or OAuth) via an authenticating proxy To enable this feature, set the `REMOTE_USER_HEADER` value to a header you wish to authenticate with. HTTP headers will be prefixed with `HTTP_` and have any dashes converted to underscores. Headers without that prefix can be set by the WSGI server itself only, which is more secure. When `REMOTE_USER_HEADER` is set, Healthchecks will: + - assume the header contains user's email address - look up and automatically log in the user with a matching email address - automatically create an user account if it does not exist