Started implementing an Oauth server

This commit is contained in:
Jan Böhmer 2026-07-26 19:51:10 +02:00
parent 51ce453d1a
commit c2948f7d84
31 changed files with 2551 additions and 90 deletions

7
.env
View file

@ -5,6 +5,12 @@
# Share that value with nobody and keep it secret
APP_SECRET=a03498528f5a5fc089273ec9ae5b2849
# Used to encrypt OAuth2 authorization codes and refresh tokens (only relevant if you use OAuth2 client
# auto-provisioning for API/MCP apps). Change this to a random value with "bin/console part-db:oauth:generate-keys"
# or by generating your own via Defuse\Crypto\Key::createNewRandomKey(). Keep it secret, and do NOT change
# it once set, or all outstanding refresh tokens/in-flight authorization codes become invalid.
OAUTH2_ENCRYPTION_KEY=def000000623b5c5664b11de7629fa777a91638b6cf0136ff4d7ef645bdc3d7665a1d605edefcf60a0fc3951b1e74529332005a3bd3cc402f0f46cf1e34d437b0b53e63b
# Change this and uncomment the following line to set the trusted hosts for your Part-DB installation, aka under which
# domain names it is reachable. This is makes things more secure, because it can prevent certain header attacks.
# You have to escape dots in the domain name with a backslash
@ -191,3 +197,4 @@ APP_SHARE_DIR=var/share
###> symfony/ai-open-router-platform ###
OPENROUTER_API_KEY=
###< symfony/ai-open-router-platform ###