Skip to main content

Overview

Casdoor can uses other OAuth applications as a sign in method.

Now, Casdoor supports many OAuth application providers. Icons of providers will be shown in login and signup pages after adding to Casdoor. Here are the providers Casdoor supporting:

GoogleGitHubFacebookTwitterLinkedInWeiboWeChatTencent QQDingtalkGiteeEmailSMS
🚧

We will show you how to apply for a third-party service and add it to casdoor.

Apply to become a developer

Before this, there are some general concepts you need to understand.

  • RedirectUrl, Redirect address after authentication, fill in your application address, such as https://forum.casbin.com/
  • Scope, Permission granted to you by the user, such as basic profile, Email address and posts and others.
  • ClientId/AppId, ClientKey/AppSecret, This is the most important information, and it is what you need to get after you apply for a developer account, can not share the key/secret with anyone.

Twitter(still working🚧)

Twitter’s application steps are somewhat troublesome, and the official restrictions are a bit strict, so it may be more difficult to apply for a developer account than other third-party platforms.

Visit Developer Portal, register if you don't have an account. Twitter needs to know what you are applying for a developer account for. You must fill in it carefully, otherwise it will not pass.

After the application is approved, create an application, fill in the callback address and other information, you need to do two things, which will be set is Authentication settings section.

  • Manually turn on 3-legged OAuth, for Sign in with Twitter, posting Tweets on behalf of other accounts and more.
  • Enable Request email address from users, for getting user email address.

Weibo✔️

Weibo's developer account application is not difficult, but the speed is relatively slow, it takes about 2-3 days.

Visit Developer Website, filling in basic information and waiting for a long review...

After the review is approved, you can get the Client Id and Client Secret.

WeChat✔️

Visit WeChat developer platform, register as a developer, after your web application or your mobile application is approved, then you get you App Id and App Secret.

For more detailed information, please visit WeChat Open Platform.

Tencent QQ✔️

Visit authentication platform of QQ - Connect QQ.

First you need to apply to become a developer, after the review is approved, follow the instructions of the platform and get your Client Id and Client Secret.

DingTalk✔️

Visit DingTalk developer platform and log in using your DingTalk account, after enter the platform, follow the instructions of the platform and you will get your Client Id and Client Secret.

For more detailed information please visit DingTalk developer docs.

Add an OAuth provider

  1. Navigate to your Casdoor index page
  2. Click Providers in the top bar
  3. Click Add, then you can see a new provider in the list top
  4. Click the new provider to modify it
  5. Select OAuth in Category
  6. Choose the OAuth provider you need in Type
  7. Fill the most import information, Client ID and Client Secret

Applied in application

  1. Click Applicaton in the top bar and choose one application, edit
  2. click provider add button, select the provider you just added
  3. Modify the permissions of the provider, such as allowing registration, login, and unbinding
  4. Done!