Skip to content

Feature/replace auth #697

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
ja573 wants to merge 6 commits into
base: launch/v1.0.0
Choose a base branch
from
Draft

Feature/replace auth #697

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
73331c7
Implement zitadel in graphql
ja573 Jun 3, 2025
635269f
Generate private key from setup
ja573 Jun 3, 2025
4d56f8f
Generate private key from setup
ja573 Jun 3, 2025
d198882
Merge branch 'develop' into feature/replace-auth
ja573 Jun 6, 2025
a52c645
Update changelog
ja573 Jun 6, 2025
0e7effe
Merge branch 'launch/v1.0.0' into feature/replace-auth
ja573 Oct 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 0 additions & 4 deletions .env.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,10 @@
THOTH_GRAPHQL_API=http://localhost:8000
# THOTH_EXPORT_API is used at compile time, must be a public facing URL
THOTH_EXPORT_API=http://localhost:8181
# Authentication cookie domain
THOTH_DOMAIN=localhost
# Full postgres URL
DATABASE_URL=postgres://thoth:thoth@localhost/thoth
# Full redis URL
REDIS_URL=redis://localhost:6379
# Authentication cookie secret key
SECRET_KEY=an_up_to_255_bytes_random_key
# Logging level
RUST_LOG=info

Expand Down
1 change: 1 addition & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
.env
db/
target/
machinekey/
3 changes: 3 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]
### Changed
- [697](https://github.com/thoth-pub/thoth/pull/697) – Migrated GraphQL API authentication to OIDC via Zitadel. Internal JWT handling has been replaced with introspection of Zitadel-issued tokens. Authorisation is now based entirely on token claims, removing the need for the internal `account` and `publisher_account` tables.
- [697](https://github.com/thoth-pub/thoth/pull/697) – Replaced legacy password-based login in the Thoth APP with Zitadel OIDC authentication using PKCE. The app now redirects to Zitadel for login, exchanges authorisation codes for tokens, and introspects tokens client-side to determine roles and permissions.
### Removed
- Deprecated thoth-app

Expand Down
Loading