メインコンテンツにスキップ

用語参照

Basic Information​

  • Name：作成されたアプリの名前。
  • CreatedTime：アプリケーションが作成された時刻。
  • DisplayName：アプリケーションが公に表示する名前。
  • Logo：アプリケーションのロゴは、ログインページとサインアップページに表示されます。
  • Title: Custom title for the login page.
  • Favicon: The favicon URL for the application login page.
  • Order: Display order of the application.
  • HomepageUrl：アプリケーションのホームページのURL。
  • Description：アプリケーションの説明。
  • Organization：アプリが属する組織。
  • Tags：アプリケーションのタグにリストされているタグを持つユーザーのみがログインできます。
  • IsShared: Whether the application is shared across multiple organizations.

Authentication & Sign-in​

  • EnablePassword: Enable password-based authentication.
  • EnableSignUp：ユーザーがサインアップできるかどうか。 If not, accounts must be created by administrators.
  • DisableSignin: Disable sign-in for this application.
  • EnableSigninSession: Enable session-based sign-in tracking.
  • EnableAutoSignin: Enable automatic sign-in for users.
  • EnableCodeSignin: Enable sign-in using verification codes sent via email or SMS.
  • EnableExclusiveSignin: Only allow one active session per user.
  • EnableWebAuthn: Enable WebAuthn for passwordless authentication.
  • EnableLinkWithEmail: Allow users to link accounts using email verification.
  • SigninMethods: Configuration of Sign-in Methods.
  • SigninItems: Customizable UI elements on the sign-in page.
  • SignupItems：ユーザーが登録する際に入力が必要なフィールド。
  • OrgChoiceMode: How users choose their organization during sign-in.

OAuth & Token Configuration​

  • ClientId：OAuthクライアントID。
  • ClientSecret：OAuthクライアントシークレット。
  • RedirectUris：ユーザーが正常にログインした場合、CasdoorはURIsのいずれかにナビゲートします。
  • ForcedRedirectOrigin: Force redirect to a specific origin after authentication.
  • GrantTypes: Supported OAuth grant types.
  • TokenFormat：生成されるトークンの形式。 次の形式であることができます：JWT（すべてのUserフィールドを含む）、JWT-Empty（すべての空でない値を含む）またはJWT-Custom アクセストークン内のUserフィールドをカスタマイズする。 When using JWT-Custom, each attribute includes a Type field (Array or String) to control how values are returned in the token.
  • TokenSigningMethod: Algorithm used to sign tokens (e.g., RS256, HS256).
  • TokenFields: Custom fields to include in the token.
  • TokenAttributes: Custom JWT attributes to include in tokens.
  • ExpireInHours：ログインは数時間後に期限切れになります。
  • RefreshExpireInHours: Time in hours before refresh tokens expire.
  • CookieExpireInHours: Session timeout in hours (default: 720 hours / 30 days). Controls how long users stay logged in via session cookies. When users log in without selecting "Remember me", the session is capped at 24 hours for security. If set to 0, uses the default of 720 hours.

SAML Configuration​

  • Cert: Certificate used for SAML signing.
  • EnableSamlCompress: Enable compression for SAML requests and responses.
  • EnableSamlC14n10: Enable C14N 1.0 canonicalization for SAML.
  • EnableSamlPostBinding: Use POST binding instead of GET for SAML responses.
  • DisableSamlAttributes: Disable sending user attributes in SAML responses (only sends NameID).
  • EnableSamlAssertionSignature: Enable digital signatures for SAML assertions. When disabled, only the response envelope is signed while maintaining compatibility with service providers that don't support assertion signatures.
  • UseEmailAsSamlNameId: Use user's email as the SAML NameID instead of username.
  • SamlReplyUrl: The ACS (Assertion Consumer Service) URL for SAML responses.
  • SamlAttributes: Custom SAML attributes to include in the response.
  • SamlHashAlgorithm: Hash algorithm for SAML signatures (e.g., SHA256).

Providers & Services​

  • Providers：アプリケーションに各種サービスを提供する（OAuth、Email、SMSサービスなど）。

UI Customization​

  • HeaderHtml: Custom HTML to display in the header of login/signup pages.
  • FooterHtml: Custom HTML to display in the footer of login/signup pages.
  • SignupHtml: Custom HTML for the signup page.
  • SigninHtml: Custom HTML for the signin page.
  • FormCss: Custom CSS for the login form.
  • FormCssMobile: Custom CSS for the login form on mobile devices.
  • FormOffset: Vertical offset for the login form position.
  • FormSideHtml: Custom HTML to display beside the login form.
  • FormBackgroundUrl: Background image URL for the login page.
  • FormBackgroundUrlMobile: Background image URL for the login page on mobile devices.
  • ThemeData: Theme configuration data for customizing colors and styles.

Security & Access Control​

  • DefaultGroup: Default group assigned to new users.
  • IpRestriction: IP-based access restrictions for the application.
  • IpWhitelist: List of allowed IP addresses.
  • FailedSigninLimit: Number of failed sign-in attempts before account is temporarily locked.
  • FailedSigninFrozenTime: Duration in seconds that an account remains locked after exceeding failed sign-in limit.

External URLs​

  • SigninUrl: Custom sign-in URL if using external authentication.
  • SignupUrl：Casdoorの外で独立してサインアップサービスを提供する場合は、ここにURLを記入してください。
  • ForgetUrl: Custom URL for password recovery page.
  • AffiliationUrl: URL for affiliation or invitation system.
  • TermsOfUse: URL or identifier for terms of use document.

Other​

  • CodeResendTimeout: Time in seconds before users can request another verification code (default: 60).