authentication

Description 📓

Partially based on this tweet https://twitter.com/t3dotgg/status/1413983193212981248 and closed issues like #969 #497 #525 (and highly probable interest), we should document a way to secure Preview environments.

Given the (unchecked) assumption that most of our users use OAuth as their main provider, the main challenge lies in that Preview environments usually have a dynami

Please update documentation to add Known OIDC Redirect URI's for the following applications:

Wekan (version 5.41) ---> https://wekan.example.com/_oauth_oidc
Portainer CE (version 2.6.1) ---> https://portainer.example.com
Nextcloud (Requires Add-on: Here, Version 22.1.0) --> https://nextcloud.example.com/apps/oidc_login/oidc

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

The repo containing the Dockerfile and the entrypoint is here.

Before opening, please confirm:

• I have installed the latest version of the Amplify CLI (see above), and confirmed that the issue still persists.
• I have searched for duplicate or closed issues.
• I have read the guide for [submitting bug reports](https://github.com/aws-amplify/amplify-cli/blob/master/CONTRIBUTI