I would really like some more insights to the enterprise mode

[jakobthun]

I'm really interested in documentation around getting enterprise mode running and its different features.

Especially interested in:

• Automatic updates of documentation by watching build artefacts is interesting.
• And protecting the enterprise hub with SSO/OAuth (keycloak) if possible.

Awesome work!

Thanks,
Jakob

[MykolaGolubyev]

Hi Jakob,
Will try to get back to you soon.
Re authorize, the only built in solution assumes you have something in front of znai server that injects username. Like nginx with Kerberos for example.

Please let me know how much you can implement on your side using Java and I may come up with some additional plugin points to add to znai

[jakobthun]

I have HAProxy in front of several microservices maybe I can inject something there. Not sure about the details of Kerberos. Will look into it.
What does it expect to be injected? Is it using the Bearer header?

It would be super if it was able to authenticate via OIDC (OpenID Connect) and get username and role information from a bearer token. We use keycloak for several other systems and having SSO in that would be great.
Maybe I can help out with something?

I can implement quite a lot in java, but I might need some pointers.

I'm currently building znai from source and looking into both the enterprise module to understand its config, and also some minor adaptions to plugins in the react-part. (making the spoiler plugin expandable instead of taking up the full content height before reveal)