#45 · Migrate auth to Authentik OIDC PKCE via @irregularchat/shared-utils
+240 pts on merge
Claim on GitLab
Submit a merge request that closes this issue to earn points on merge — bounties stack on the standard
+40 merge_pr award. New to the repo? See the
Contributing guide,
and Local Development & SSO
to run the app locally (
cp .dev.vars.example .dev.vars && pnpm dev, after rebasing on main) and fully test your change before opening the MR.
Description
Context
UXS Portal pre-dates the shared-utils package. Per the README "refactor backlog" and the monorepo direction, migrate auth to the same OIDC PKCE flow used by every other Worker (task-exchange, fieldnotes, etc.). Removes a divergent auth path.
Acceptance criteria
- [ ] All login/logout/session paths use
createAuthHandlersfrom@irregularchat/shared-utils - [ ] FastAPI backend trusts Worker-issued JWT (Worker is the OIDC client)
- [ ] Existing user data migrates cleanly — no orphan accounts
- [ ] README "refactor backlog" item ticked off
Technical hints
- Reference: any existing CF Worker app (e.g.
apps/fieldnotes/) for the OIDC PKCE pattern - FastAPI side needs a JWT verifier middleware — pick
python-jose(lightweight)
--- *Submit a merge request that says Closes #<this issue iid> in the description. On merge to main, the GitLab webhook will auto-award your bounty + the standard merge_pr (40 pts) to your scoreboard account. Email on commit must match your Authentik email.*
Relevant files
No relevant files linked yet.
Hints
No hints yet.
Activity
No points have been awarded for this bounty yet.
Comments
Sign in to join the discussion.
No comments yet. Be the first to weigh in.