OAuth 2.0
OAuth let users to register and log in AFFiNE with external account providers.
We now support Google, Github and general OIDC-compatible setup.
OAuth settings are located at Admin Panel -> Settings -> OAuth.
In standard OAuth2 authentication flow, a redirect_uri is required by OAuth providers to validate authentication requests without been forged.
AFFiNE server's redirect_uri would be <your-affine.domain>/oauth/callback
Follow Google's Docs to apply OAuth credentials and input them in settings
Github
Follow Github's Docs to create an OAuth App and generate the corresponding client id and client secret.
OIDC
OIDC(short of OpenID Connect) is a universal wrapper layer on top of OAuth 2.0 protocol.
Distingushed from specific provides like Google or Github, The OIDC provider requires an extra issuer parameter to let the server know where to fetch the OAuth configuration.