ThinkStorm · Devlog
Ecosystem Integration: Gitea OAuth2 Single Sign-On and OpenGist Dossier Publishing
Connected ThinkStorm with self-hosted ecosystem services by implementing Gitea OAuth2 authentication, session cookie management, and automated dossier synchronization to OpenGist.
Ecosystem Integration: Gitea OAuth2 SSO & OpenGist Synchronization
To operate seamlessly within the self-hosted Labyricorn infrastructure, ThinkStorm required direct integration with authentication providers and publishing backends. This milestone unified user authentication with Gitea accounts and enabled automated snippet publishing to OpenGist.
Key Changes
1. Gitea OAuth2 Single Sign-On Flow
- Configured Gitea OAuth application credentials and registered redirect callback routes at
/auth/gitea/callback. - Fixed authorization code exchange by enforcing
Accept: application/jsonheaders on token requests to Gitea. - Implemented automated user provisioning: authenticating via Gitea retrieves profile information, associates local user records (
gitea_id), and issues secure HTTP-only session cookies (thinkstorm_session).
2. OpenGist REST API Formatter Alignment
- Deployed OpenGist v1.15 with custom branding, SSH Git support, and Gitea OAuth links.
- Resolved REST API schema mismatches by updating the OpenGist adapter to target
POST /api/gistsusing the array/map payload structures and Personal Access Token bearer authentication. - Added direct local subnet communication to avoid external IPv6 connection latency.