github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-26 11:43:59 -05:00
Code Issues Projects Releases Packages Wiki Activity
hedgedoc/docs/guides/auth/mattermost-self-hosted.md
Ondřej Slabý 6ce7b20a7f Add an auth provider guide for Mattermost 
Signed-off-by: Ondřej Slabý <kron258@gmail.com>
2018-08-28 11:00:00 +02:00

2.8 KiB
Raw Blame History

Authentication guide - Mattermost (self-hosted)

Note: The Mattermost setup portion of this document is just a quick guide. See the official documentation for more details.

This guide uses the generic OAuth2 module for compatibility with Mattermost version 5.0 and above.

  1. Sign-in with an administrator account to your Mattermost instance
  2. Make sure OAuth 2.0 Service Provider is enabled in the Main Menu (menu button next to your username in the top left corner) --> System Console --> Custom Integrations menu, which you can find at https://your.mattermost.domain/admin_console/integrations/custom

mattermost-enable-oauth2

  1. Navigate to the OAuth integration settings through Main Menu --> Integrations --> OAuth 2.0 Applications, at https://your.mattermost.domain/yourteam/integrations/oauth2-apps
  2. Click on the Add OAuth 2.0 Application button to add a new OAuth application

mattermost-oauth-app-add

  1. Fill out the form and click Save

mattermost-oauth-app-form

Note: The callback URL is <your-codimd-url>/auth/oauth2/callback

  1. After saving the application, you'll receive the Client ID and Client Secret

mattermost-oauth-app-done

  1. Add the Client ID and Client Secret to your config.json file or pass them as environment variables
    • config.json: 
      {
  "production": {
    "oauth2": {
        "baseURL": "https://your.mattermost.domain",
        "userProfileURL": "https://your.mattermost.domain/api/v4/users/me",
        "userProfileUsernameAttr": "id",
        "userProfileDisplayNameAttr": "username",
        "userProfileEmailAttr": "email",
        "tokenURL": "https://your.mattermost.domain/oauth/access_token",
        "authorizationURL": "https://your.mattermost.domain/oauth/authorize",
        "clientID": "ii4p1u3jz7dXXXXXXXXXXXXXXX",
        "clientSecret": "mqzzx6fydbXXXXXXXXXXXXXXXX"
    }
  }
}
    • environment variables: 
      CMD_OAUTH2_BASEURL=https://your.mattermost.domain
CMD_OAUTH2_USER_PROFILE_URL=https://your.mattermost.domain/api/v4/users/me
CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR=id
CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR=username
CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR=email
CMD_OAUTH2_TOKEN_URL=https://your.mattermost.domain/oauth/access_token
CMD_OAUTH2_AUTHORIZATION_URL=https://your.mattermost.domain/oauth/authorize
CMD_OAUTH2_CLIENT_ID=ii4p1u3jz7dXXXXXXXXXXXXXXX
CMD_OAUTH2_CLIENT_SECRET=mqzzx6fydbXXXXXXXXXXXXXXXX