_brecci_

Hello, how to clean this message in the Twilio SMS provider, in the Casdoor SMS Test feature?

To only get the code number

here it goes

Hello, there is an APIKeys management in Casdoor by org?

Our usage pattern is fairly light and standard: we’re using Casdoor via OAuth2, with password grant type, client credentials, user CRUD and listing permissions, user info and logout flows. We are not using the syncer feature (we have no external directory or database sync configured).

If useful: we also don’t have large user import/migration jobs or external IdP syncing currently.

Given this, do you think any internal Casdoor component (even unused syncer modules) could still contribute to memory/CPU growth over time? Or would you point me to where the growth might come from given this usage pattern?

Hey folks
Quick question about Casdoor’s Helm chart and HPA behavior:

We noticed the official chart doesn’t define any resources (CPU/memory requests or limits). That’s causing a few issues for us:

Pods can consume all node resources if no limits are set.

HPA doesn’t scale properly because there are no requests to base metrics on.

Our dashboards also lose visibility for CPU/mem utilization.

We’ve seen Casdoor start with low memory usage but grow up to ~900 MB in one cluster and 3–4 Gi in another.

Questions:

Does Casdoor have any internal caching or process that might explain the memory growth over time?

Would it make sense to add default (or example) resources to the Helm chart so HPA works properly out of the box?

Thanks a lot!

Mapping the types when calling the API directly, for non existing sdk operations

Precisely, I'm importing Casdoor packages from version v1.996.0 and plan to move to v2.63.0

Hey, how should we migrate to casdoor v2? Is there some docs or guide? @hsluoyz

The repo seems to not follow the Go standards of adding /v2 to the main module, what causes a build error here... What should be done in order to fix that?

@hsluoyz is there an existing option or chance to implement a feature toggle to redirect directly to the provider instead of going to the casdoor login page when doing the following:

authURL := oauth2Config.AuthCodeURL(
        state,
        oauth2.SetAuthURLParam("code_challenge", codeChallenge),
        oauth2.SetAuthURLParam("code_challenge_method", "S256"),
        oauth2.SetAuthURLParam("provider", idp),
        oauth2.SetAuthURLParam("prompt", "select_account"),
    )

As casdoor already has all those Providers implemented, It's interesting to not having to reimplement all over again

Hi, any way to get via sdk the provider login URL for ex. Google... To hide the casdoor login page and go straight to the provider?

MyFront -> MyAuthAbstraction -> Casdoor -> Google

(Without showing the Casdoor login page)

sent to this email

Hey I'm getting many vulnerability alerts in my pipeline when running the base casdoor image (casbin/casdoor:v1.919.0), is there any recurrent dependency update to fix this issues?

(running security check with trivy)

Issue:

@hsluoyz , I'd be happy to help

Someone already had the problem of when calling the logout endpoint the token still gets "active = true" in the introspection endpoint for that token?

since my endpoints calls the Casdoor's introspection endpoint first to assure the token is still valid, I'm always letting the request passes by my application even when the token got revoked by logout

Hello everyone!

Someone already had the problem of when calling the logout endpoint the token still gets "active = true" in the introspection endpoint for that token?

since my endpoints calls the Casdoor's introspection endpoint first to assure the token is still valid, I'm always letting the request passes by my application even when the token got revoked by logout

How to embed the public key in all tokens (like Casdoor does for authorization code grant)?

Tokens generated using password and client credentials grant types, come without the public key, by default. While tokens from authorization code grant comes with it already:

Hello everyone,

I’m trying to find a way to retrieve a user’s resource access along with the associated permitted actions. Specifically, I would like to get the following kind of output for a given user:

sales: ["read", "write"],
products: ["*"],
have_no_access_to_this: []

Is there an existing method or API in Casdoor to fetch this information?

Any options to keep casdoor hidden from Frontend, with only the backend (also proxy to casdoor) knowing Casdoor?