goauthentik / goauthentik/authentik

Account Linking and OAuth Extra Scopes Support

Open
#5,740 3 comments 1 reaction 1 assignee Claimed by @dewi-tik View on GitHub
needs_documentation question
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 2h
Merged PRs (30d)
651

Description

**Is your feature request related to a problem? Please describe.**
The main goal is to provide users of the app with the capability to link multiple accounts from different authentication providers without the need for separate account creation. Also, the ability to use social OAuth with passing extra scopes.

**Describe the solution you'd like**
Let's consider a specific example to illustrate the problem. Imagine a user, James, who is logged into the app using his primary Gmail account, [james@gmail.com](mailto:james@gmail.com). James also has another Gmail account, [james.pro@gmail.com](mailto:james.pro@gmail.com), which he wants to connect and import contacts into the app.

By linking his [james.pro@gmail.com](mailto:james.pro@gmail.com) account to his primary [james@gmail.com](mailto:james@gmail.com) account, James aims to import contacts from [james.pro@gmail.com](mailto:james.pro@gmail.com) without having to create a separate account.

To make the desired functionality achievable, the following capabilities are needed:

1. Ability to include additional scopes when performing an OAuth sign-in. This would allow to request access to specific permissions or resources.
2. Ability to obtain the access_token from the OAuth provider.
3. Account linking functionality or, at the very least, the ability to retrieve the necessary tokens.

**Describe alternatives you've considered**
An alternative approach to address this functionality could involve utilizing a custom library for managing the OAuth outside the IAM.

**Additional context**
N/A

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.