diff --git a/server/plugins/com.msgbyte.iam/strategies/github.ts b/server/plugins/com.msgbyte.iam/strategies/github.ts index 839db04d..b203e1cc 100644 --- a/server/plugins/com.msgbyte.iam/strategies/github.ts +++ b/server/plugins/com.msgbyte.iam/strategies/github.ts @@ -7,9 +7,14 @@ const clientInfo = { secret: process.env.IAM_GITHUB_SECRET, }; -const authorize_uri = 'https://github.com/login/oauth/authorize'; -const access_token_uri = 'https://github.com/login/oauth/access_token'; -const userinfo_uri = 'https://api.github.com/user'; +const authorize_uri = + process.env.IAM_GITHUB_URI_AUTHORIZE || + 'https://github.com/login/oauth/authorize'; +const access_token_uri = + process.env.IAM_GITHUB_URI_ACCESS_TOKEN || + 'https://github.com/login/oauth/access_token'; +const userinfo_uri = + process.env.IAM_GITHUB_URI_USERINFO || 'https://api.github.com/user'; const redirect_uri = `${config.apiUrl}/api/plugin:com.msgbyte.iam/github/redirect`; export const GithubStrategy: StrategyType = { diff --git a/website/docs/advanced-usage/plugins/com.msgbyte.iam.md b/website/docs/advanced-usage/plugins/com.msgbyte.iam.md index ef865396..b3ee6d41 100644 --- a/website/docs/advanced-usage/plugins/com.msgbyte.iam.md +++ b/website/docs/advanced-usage/plugins/com.msgbyte.iam.md @@ -25,6 +25,12 @@ Configure Tailchat environment variables: Respectively, `Client ID` and `Client secrets` obtained before +> You also can use env to overwrite uri, for example use proxy: +> +> - IAM_GITHUB_URI_AUTHORIZE=https://github.com/login/oauth/authorize +> - IAM_GITHUB_URI_ACCESS_TOKEN=https://github.com/login/oauth/access_token +> - IAM_GITHUB_URI_USERINFO=https://api.github.com/user + ## Security Protection In order to prevent tokens from being obtained by malicious applications, it is recommended to add front-end domain name verification. diff --git a/website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/advanced-usage/plugins/com.msgbyte.iam.md b/website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/advanced-usage/plugins/com.msgbyte.iam.md index dca80f87..cc744f40 100644 --- a/website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/advanced-usage/plugins/com.msgbyte.iam.md +++ b/website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/advanced-usage/plugins/com.msgbyte.iam.md @@ -25,6 +25,12 @@ title: iam - 第三方登录 分别为之前获取到的`Client ID` 与 `Client secrets` +> 你也可以通过环境变量重写请求地址,例如使用代理: +> +> - IAM_GITHUB_URI_AUTHORIZE=https://github.com/login/oauth/authorize +> - IAM_GITHUB_URI_ACCESS_TOKEN=https://github.com/login/oauth/access_token +> - IAM_GITHUB_URI_USERINFO=https://api.github.com/user + ## 安全强化 为了token的安全不被恶意应用获取,建议增加前端域名校验。