Powerful authentication with caddy-security about mycorrhiza HOT 3 OPEN

Yup, that would be enough!

from mycorrhiza.

The only thing missing would be assigning Mycorrhiza groups based on X-Token-User-Roles. You'd detect myco/editor, myco/trusted, myco/moderator, and myco/admin and give the user the highest role in the header.

However, this only adds a little bit of value, and if it's at all difficult to implement, I'd much prefer you just implement username authentication.

from mycorrhiza.

Caddy sounds fun. I guess one can already use this system, if they set up the wiki to be anonymous and set up this portal. It's like Basic Auth advanced replacement, right?

Would the following be enough to implement the feature?:

• Add a toggle in configuration: “Enable Caddy portal”.
• If there is that username header, authorize with that username.
• Deny the usual login procedure (ie /login and /register) would do nothing.

from mycorrhiza.