About

Sojuauth is a basic HTTP web server which can be used as authentication provider for Soju in auth http mode to allow the provisioning of bouncer users via OpenID Connect.

The first time an user accesses Sojuauth, they are prompted to log in via the configured OpenID Connect provider, and then a new pair of credentials associated with their sub claim, with their preferred_username claim becoming their username and a random secure password being generated.

The user can then use those credentials to log into Soju and also use its filehost capabilities.

If the user attempts to access Sojuauth again, their password is reset, but since Soju forbids changing username once an user is created, their original username is maintained via matching their previous sub claim, even if their preferred_username claim is now different.