Skip to content

🔐 [FEATURE] [1.0] Authentication & Authorization #280

@AndreRatzenberger

Description

@AndreRatzenberger

Is your feature request related to a problem?

Enterprise customers require authenticated dashboards and fine-grained access controls, but Flock currently trusts everyone with access to the process. There is no supported OAuth/OIDC integration or API key system, making it impossible to deploy in regulated environments.

Describe the solution you want to see

  • Provide pluggable authentication modules for the dashboard (OAuth2/OIDC) and API (API key + secret stores) with configuration via environment variables or config files.
  • Implement role-based authorization that maps dashboard/API actions and agent visibility to user roles or labels.
  • Emit audit logs for login events, access denials, and privileged actions to satisfy compliance requirements.
  • Supply end-to-end examples demonstrating integration with popular identity providers (Auth0, Azure AD, Okta).

Describe alternatives you have considered

Teams can front the dashboard with custom reverse proxies, but that only guards HTTP access and doesn’t integrate with Flock’s visibility model or API usage. Building auth in each deployment slows adoption and increases support burden.

Additional context

Make sure the solution interplays with visibility rules (Private/Tenant/Labelled) so agent permissions stay coherent. Coordinate rollout alongside the Kubernetes chart (#279) for turnkey enterprise deployments.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    Status

    Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions