Patzer gets single sign-on: your family's chess server behind Authentik, Keycloak or Authelia

说明与用途

Patzer 现在支持安全的本地 OIDC 单点登录，消除了儿童使用密码的风险，并通过 IdP 组简化管理员管理。

问题

Parents want a self‑hosted chess server for children without exposing them to external accounts, ads, or cloud services.

结果

Patzer now supports secure, local OIDC SSO, eliminating password exposure for children and simplifying admin management via IdP groups.

工作流

• Configure OIDC by setting environment variables OIDC_ISSUER and OIDC_CLIENT_ID.
• Optionally enable SSO‑only mode with OIDC_ONLY=true to remove password login, sign‑up, and reset.
• Set OIDC_ADMIN_GROUP to map an IdP group to admin users; the group is checked on every login.
• Configure account linking with OIDC_AUTO_PROVISION and OIDC_MATCH_BY to control account creation or linking.
• Deploy Patzer with Docker: docker run -d -p 8800:8800 -v patzer-data:/app/data --name patzer ghcr.io/Sikamikaniko123/patzer:latest

证据

A contributor added OIDC single sign-on to Patzer (PR #72), and it's in the released Docker image.

来源

If you already run an identity provider on your homelab — Authentik, Keycloak, Authelia, Pocket ID, whatever — your chess server can sit behind it.

来源

SSO-only mode. OIDC_ONLY=true removes password login, sign-up and password reset entirely — in the UI and on the server.

来源