LeoVasanko/paskia
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Docs updates.

Browse Source
This commit is contained in:
LeoVasanko
2025-12-19 20:56:47 +00:00
parent 0bc1bae26c
commit c64554aeda
2 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Headers.md
+4 -4
View File
@@ -5,11 +5,11 @@
| `Remote-User` | Authenticated user UUID | **01c03276-b8f0-**… (string) |
| `Remote-Name` | User display name | **John Doe** |
| `Remote-Org` | Organization UUID | Identifier for user's org (string) |
| `Remote-Org-Name` | Organization display name | `The Company Ltd.` |
| `Remote-Org-Name` | Organization display name | **The Company Ltd.** |
| `Remote-Role` | Role UUID | Identifier for user's role (string) |
| `Remote-Role-Name` | Role display name | `Employee` |
| `Remote-Groups` | Permissions the user has, comma separated | `auth:admin,yourapp:reports` |
| `Remote-Session-Expires` | Session expiry timestamp (ISO 8601 UTC) | `2030-12-31T23:59:59Z` |
| `Remote-Role-Name` | Role display name | **Employee** |
| `Remote-Groups` | Permissions the user has, comma separated | **auth:admin,yourapp:reports** |
| `Remote-Session-Expires` | Session expiry timestamp (ISO 8601 UTC) | **2030-12-31T23:59:59Z** |
| `Remote-Credential` | Credential UUID | Identifier for the sign-in passkey (string) |
Similar headers are also used by other authentication systems like [Authelia](https://www.authelia.com/integration/trusted-header-sso/introduction/) to signal the backend application information about the signed in user.
README.md
+4 -4
View File
@@ -53,10 +53,10 @@ paskia serve [options]
| Option | Description | Default |
|--------|-------------|---------|
| Listen address | One of **<host>:<port>** (default all hosts, port 4401) or **unix:/path/to/paskia.socket** (Unix socket) | **localhost:4401** |
| --rp-id *<domain>* | Main/top domain | **localhost** |
| --rp-name "*<text>*" | Name of your company or site | Same as rp-id |
| --origin *<url>* | Explicitly list the domain names served () | **https://rp-id** |
| --auth-host *<domain>* | Dedicated authentication site (e.g., **auth.example.com**) | Unspecified: we use **/auth/** on *every* site under rp-id.|
| --rp-id **<domain>** | Main/top domain | **localhost** |
| --rp-name **<text>** | Name of your company or site | Same as rp-id |
| --origin **url>** | Explicitly list the domain names served () | **https://rp-id** |
| --auth-host **<domain>** | Dedicated authentication site (e.g., **auth.example.com**) | Unspecified: we use **/auth/** on *every* site under rp-id.|
## Further Documentation