goauthentik / goauthentik/authentik
Account Linking and OAuth Extra Scopes Support
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 651
Description
**Is your feature request related to a problem? Please describe.**
The main goal is to provide users of the app with the capability to link multiple accounts from different authentication providers without the need for separate account creation. Also, the ability to use social OAuth with passing extra scopes.
**Describe the solution you'd like**
Let's consider a specific example to illustrate the problem. Imagine a user, James, who is logged into the app using his primary Gmail account, [james@gmail.com](mailto:james@gmail.com). James also has another Gmail account, [james.pro@gmail.com](mailto:james.pro@gmail.com), which he wants to connect and import contacts into the app.
By linking his [james.pro@gmail.com](mailto:james.pro@gmail.com) account to his primary [james@gmail.com](mailto:james@gmail.com) account, James aims to import contacts from [james.pro@gmail.com](mailto:james.pro@gmail.com) without having to create a separate account.
To make the desired functionality achievable, the following capabilities are needed:
1. Ability to include additional scopes when performing an OAuth sign-in. This would allow to request access to specific permissions or resources.
2. Ability to obtain the access_token from the OAuth provider.
3. Account linking functionality or, at the very least, the ability to retrieve the necessary tokens.
**Describe alternatives you've considered**
An alternative approach to address this functionality could involve utilizing a custom library for managing the OAuth outside the IAM.
**Additional context**
N/A
Contributor guide
Assessment
This issue has not been assessed yet.