cross-posted from: https://lemmy.world/post/28692919

uSentry is a lightweight, self-hosted Identity and Access Management (IAM) and Single Sign-On (SSO) solution designed for homelab and small-scale environments.

⚡ A single PHP file. < 400 lines of code. No database. No background processes. No cloud. Just works. ⚡

Most IAM and SSO solutions require databases, certificates and background services baked into a dozen containers. This is all fine but also also overkill for homelabs and impossible for low-power ARM devices. uSentry is different, it isn’t pretty but it sucks less for a lot of use cases.

Enjoy!

  • ExperimentalGuy
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 days ago

    I didn’t read all too much, but from a quick skim of the README it looks like it directly stores your password and not a hash. I wouldn’t use it if that’s the case.

    • elmicha@feddit.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      No, the README doesn’t say it, but in the index.php you can see that you must use password_hash to hash the passwords, and the script uses password_verify like it should be done. .

    • TCB13@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      No it doesn’t, it only stores safe hashes as per PHP recommendations and also uses the recommended functions to check the submitted login.