- {testCommands.map((cmd, index) => (
+ {testCommands.map((cmd: string, index: number) => (
{
mysqlId: id || "",
mariadbId: id || "",
mongoId: id || "",
- placementSwarm: hasAnyValue ? formData : null,
+ placementSwarm: hasAnyValue
+ ? {
+ ...formData,
+ Preferences: formData.Preferences?.map((p) => ({
+ Spread: { SpreadDescriptor: p.SpreadDescriptor },
+ })),
+ }
+ : null,
});
toast.success("Placement updated successfully");
diff --git a/apps/dokploy/components/dashboard/mariadb/general/show-external-mariadb-credentials.tsx b/apps/dokploy/components/dashboard/mariadb/general/show-external-mariadb-credentials.tsx
index 8745db286..86fe71ed4 100644
--- a/apps/dokploy/components/dashboard/mariadb/general/show-external-mariadb-credentials.tsx
+++ b/apps/dokploy/components/dashboard/mariadb/general/show-external-mariadb-credentials.tsx
@@ -73,8 +73,8 @@ export const ShowExternalMariadbCredentials = ({ mariadbId }: Props) => {
toast.success("External Port updated");
await refetch();
})
- .catch(() => {
- toast.error("Error saving the external port");
+ .catch((error: Error) => {
+ toast.error(error?.message || "Error saving the external port");
});
};
diff --git a/apps/dokploy/components/dashboard/mongo/general/show-external-mongo-credentials.tsx b/apps/dokploy/components/dashboard/mongo/general/show-external-mongo-credentials.tsx
index d30061db5..acc74066f 100644
--- a/apps/dokploy/components/dashboard/mongo/general/show-external-mongo-credentials.tsx
+++ b/apps/dokploy/components/dashboard/mongo/general/show-external-mongo-credentials.tsx
@@ -73,8 +73,8 @@ export const ShowExternalMongoCredentials = ({ mongoId }: Props) => {
toast.success("External Port updated");
await refetch();
})
- .catch(() => {
- toast.error("Error saving the external port");
+ .catch((error: Error) => {
+ toast.error(error?.message || "Error saving the external port");
});
};
diff --git a/apps/dokploy/components/dashboard/mysql/general/show-external-mysql-credentials.tsx b/apps/dokploy/components/dashboard/mysql/general/show-external-mysql-credentials.tsx
index dfaa36f6b..6e6cbe018 100644
--- a/apps/dokploy/components/dashboard/mysql/general/show-external-mysql-credentials.tsx
+++ b/apps/dokploy/components/dashboard/mysql/general/show-external-mysql-credentials.tsx
@@ -73,8 +73,8 @@ export const ShowExternalMysqlCredentials = ({ mysqlId }: Props) => {
toast.success("External Port updated");
await refetch();
})
- .catch(() => {
- toast.error("Error saving the external port");
+ .catch((error: Error) => {
+ toast.error(error?.message || "Error saving the external port");
});
};
diff --git a/apps/dokploy/components/dashboard/postgres/general/show-external-postgres-credentials.tsx b/apps/dokploy/components/dashboard/postgres/general/show-external-postgres-credentials.tsx
index 46b3772a0..1d34c010a 100644
--- a/apps/dokploy/components/dashboard/postgres/general/show-external-postgres-credentials.tsx
+++ b/apps/dokploy/components/dashboard/postgres/general/show-external-postgres-credentials.tsx
@@ -75,8 +75,8 @@ export const ShowExternalPostgresCredentials = ({ postgresId }: Props) => {
toast.success("External Port updated");
await refetch();
})
- .catch(() => {
- toast.error("Error saving the external port");
+ .catch((error: Error) => {
+ toast.error(error?.message || "Error saving the external port");
});
};
diff --git a/apps/dokploy/components/dashboard/redis/general/show-external-redis-credentials.tsx b/apps/dokploy/components/dashboard/redis/general/show-external-redis-credentials.tsx
index 8edd92389..9511af628 100644
--- a/apps/dokploy/components/dashboard/redis/general/show-external-redis-credentials.tsx
+++ b/apps/dokploy/components/dashboard/redis/general/show-external-redis-credentials.tsx
@@ -74,8 +74,8 @@ export const ShowExternalRedisCredentials = ({ redisId }: Props) => {
toast.success("External Port updated");
await refetch();
})
- .catch(() => {
- toast.error("Error saving the external port");
+ .catch((error: Error) => {
+ toast.error(error?.message || "Error saving the external port");
});
};
diff --git a/apps/dokploy/components/layouts/side.tsx b/apps/dokploy/components/layouts/side.tsx
index d256a5119..0062c223a 100644
--- a/apps/dokploy/components/layouts/side.tsx
+++ b/apps/dokploy/components/layouts/side.tsx
@@ -18,8 +18,10 @@ import {
Forward,
GalleryVerticalEnd,
GitBranch,
+ Key,
KeyRound,
Loader2,
+ LogIn,
type LucideIcon,
Package,
PieChart,
@@ -396,6 +398,24 @@ const MENU: Menu = {
// Only enabled for admins in cloud environments
isEnabled: ({ auth, isCloud }) => !!(auth?.role === "owner" && isCloud),
},
+ {
+ isSingle: true,
+ title: "License",
+ url: "/dashboard/settings/license",
+ icon: Key,
+ // Only enabled for admins in non-cloud environments
+ isEnabled: ({ auth }) =>
+ !!(auth?.role === "owner" || auth?.role === "admin"),
+ },
+ {
+ isSingle: true,
+ title: "SSO",
+ url: "/dashboard/settings/sso",
+ icon: LogIn,
+ // Enabled for admins in both cloud and self-hosted (enterprise)
+ isEnabled: ({ auth }) =>
+ !!(auth?.role === "owner" || auth?.role === "admin"),
+ },
],
help: [
diff --git a/apps/dokploy/components/proprietary/auth/sign-in-with-github.tsx b/apps/dokploy/components/proprietary/auth/sign-in-with-github.tsx
new file mode 100644
index 000000000..988eeae05
--- /dev/null
+++ b/apps/dokploy/components/proprietary/auth/sign-in-with-github.tsx
@@ -0,0 +1,47 @@
+"use client";
+
+import { useState } from "react";
+import { toast } from "sonner";
+import { authClient } from "@/lib/auth-client";
+import { Button } from "@/components/ui/button";
+
+export function SignInWithGithub() {
+ const [isLoading, setIsLoading] = useState(false);
+
+ const handleClick = async () => {
+ setIsLoading(true);
+ try {
+ const { error } = await authClient.signIn.social({
+ provider: "github",
+ });
+ if (error) {
+ toast.error(error.message);
+ return;
+ }
+ } catch (err) {
+ toast.error("An error occurred while signing in with GitHub", {
+ description: err instanceof Error ? err.message : "Unknown error",
+ });
+ } finally {
+ setIsLoading(false);
+ }
+ };
+
+ return (
+
+
+
+ Sign in with GitHub
+
+ );
+}
diff --git a/apps/dokploy/components/proprietary/auth/sign-in-with-google.tsx b/apps/dokploy/components/proprietary/auth/sign-in-with-google.tsx
new file mode 100644
index 000000000..bff0e69ab
--- /dev/null
+++ b/apps/dokploy/components/proprietary/auth/sign-in-with-google.tsx
@@ -0,0 +1,59 @@
+"use client";
+
+import { useState } from "react";
+import { toast } from "sonner";
+import { authClient } from "@/lib/auth-client";
+import { Button } from "@/components/ui/button";
+
+export function SignInWithGoogle() {
+ const [isLoading, setIsLoading] = useState(false);
+
+ const handleClick = async () => {
+ setIsLoading(true);
+ try {
+ const { error } = await authClient.signIn.social({
+ provider: "google",
+ });
+ if (error) {
+ toast.error(error.message);
+ return;
+ }
+ } catch (err) {
+ toast.error("An error occurred while signing in with Google", {
+ description: err instanceof Error ? err.message : "Unknown error",
+ });
+ } finally {
+ setIsLoading(false);
+ }
+ };
+
+ return (
+
+
+
+ Sign in with Google
+
+ );
+}
diff --git a/apps/dokploy/components/proprietary/enterprise-feature-gate.tsx b/apps/dokploy/components/proprietary/enterprise-feature-gate.tsx
new file mode 100644
index 000000000..875813fcb
--- /dev/null
+++ b/apps/dokploy/components/proprietary/enterprise-feature-gate.tsx
@@ -0,0 +1,114 @@
+"use client";
+
+import { Loader2, Lock } from "lucide-react";
+import Link from "next/link";
+import { Button } from "@/components/ui/button";
+import {
+ Card,
+ CardContent,
+ CardDescription,
+ CardHeader,
+ CardTitle,
+} from "@/components/ui/card";
+import { api } from "@/utils/api";
+
+interface EnterpriseFeatureLockedProps {
+ /** Optional title override */
+ title?: string;
+ /** Optional description override */
+ description?: string;
+ /** Optional custom CTA label */
+ ctaLabel?: string;
+ /** Optional CTA href (default: /dashboard/settings/license) */
+ ctaHref?: string;
+ /** Compact variant (less padding, smaller icon) */
+ compact?: boolean;
+}
+
+/**
+ * Displays a locked state for enterprise features when the user has no valid license.
+ * Use standalone or via EnterpriseFeatureGate.
+ */
+export function EnterpriseFeatureLocked({
+ title = "Enterprise feature",
+ description = "This feature is part of Dokploy Enterprise. Add a valid license to use it.",
+ ctaLabel = "Go to License",
+ ctaHref = "/dashboard/settings/license",
+ compact = false,
+}: EnterpriseFeatureLockedProps) {
+ return (
+
+
+
+
+
+
+ {title}
+
+ {description}
+
+
+
+
+
+
+
+
+
+
+ );
+}
+
+interface EnterpriseFeatureGateProps {
+ children: React.ReactNode;
+ /** Props for the locked state when license is invalid */
+ lockedProps?: Omit
;
+ /** Show loading spinner while checking license */
+ fallback?: React.ReactNode;
+}
+
+/**
+ * Renders children only when the instance has a valid enterprise license.
+ * Otherwise shows EnterpriseFeatureLocked.
+ */
+export function EnterpriseFeatureGate({
+ children,
+ lockedProps,
+ fallback,
+}: EnterpriseFeatureGateProps) {
+ const { data: haveValidLicense, isLoading } =
+ api.licenseKey.haveValidLicenseKey.useQuery();
+
+ if (isLoading) {
+ if (fallback) return <>{fallback};
+ return (
+
+
+ Checking license...
+
+
+ );
+ }
+
+ if (!haveValidLicense) {
+ return
+ {isCheckingLicenseKey ? (
+
+
+ Checking license key...
+
+
+ ) : (
+ <>
+
+
+
+ License Key
+
+
+ {enabled && (
+
+
+ {enabled ? "Enabled" : "Disabled"}
+
+ {
+ try {
+ await updateEnterpriseSettings({
+ enableEnterpriseFeatures: next,
+ });
+ await utils.licenseKey.getEnterpriseSettings.invalidate();
+ toast.success("Enterprise features updated");
+ } catch (error) {
+ console.error(error);
+ toast.error("Failed to update enterprise features");
+ }
+ }}
+ />
+
+ )}
+
+
+
+ To unlock extra features you need an enterprise license key.
+ Contact us{" "}
+
+
+ {enabled ? (
+ <>
+
+
+
+ License Key
+
+
+
+ {haveValidLicenseKey && (
+ {
+ try {
+ await deactivateLicenseKey();
+ await utils.licenseKey.getEnterpriseSettings.invalidate();
+ await utils.licenseKey.haveValidLicenseKey.invalidate();
+ setLicenseKey("");
+ toast.success("License key deactivated");
+ } catch (error) {
+ console.error(error);
+ toast.error(
+ error instanceof Error
+ ? error.message
+ : "Failed to deactivate license key",
+ );
+ }
+ }}
+ disabled={isDeactivating || !haveValidLicenseKey}
+ >
+
+ Deactivate
+
+
+ )}
+ {haveValidLicenseKey && (
+ {
+ try {
+ const valid = await validateLicenseKey();
+ if (valid) {
+ toast.success("License key is valid");
+ } else {
+ toast.error("License key is invalid");
+ }
+ } catch (error) {
+ console.error(error);
+ toast.error(
+ error instanceof Error
+ ? error.message
+ : "Failed to validate license key",
+ );
+ }
+ }}
+ >
+ Validate
+
+ )}
+ {!haveValidLicenseKey && (
+ {
+ try {
+ await activateLicenseKey({ licenseKey });
+ await utils.licenseKey.getEnterpriseSettings.invalidate();
+ await utils.licenseKey.haveValidLicenseKey.invalidate();
+ toast.success("License key activated");
+ } catch (error) {
+ console.error(error);
+ toast.error(
+ error instanceof Error
+ ? error.message
+ : "Failed to activate license key",
+ );
+ }
+ }}
+ >
+ Activate
+
+ )}
+
+
+
+ ) : (
+
+
+
+
+
+
Enterprise Features
+
+ Unlock advanced capabilities like SSO, Audit logs,
+ whitelabeling and more.
+
+
+
+
+
{
+ try {
+ await updateEnterpriseSettings({
+ enableEnterpriseFeatures: true,
+ });
+ await utils.licenseKey.getEnterpriseSettings.invalidate();
+ toast.success("Enterprise features enabled");
+ } catch (error) {
+ console.error(error);
+ toast.error("Failed to enable enterprise features");
+ }
+ }}
+ isLoading={isSaving}
+ disabled={isLoading || isDeactivating}
+ >
+ Enable Enterprise Features
+
+
+ )}
+
+ )}
+
;
+
+interface RegisterOidcDialogProps {
+ children: React.ReactNode;
+}
+
+const formDefaultValues = {
+ providerId: "",
+ issuer: "",
+ domains: [""],
+ clientId: "",
+ clientSecret: "",
+ scopes: [...DEFAULT_SCOPES],
+};
+
+export function RegisterOidcDialog({ children }: RegisterOidcDialogProps) {
+ const utils = api.useUtils();
+ const [open, setOpen] = useState(false);
+ const { mutateAsync, isLoading } = api.sso.register.useMutation();
+
+ const form = useForm({
+ resolver: zodResolver(oidcProviderSchema),
+ defaultValues: formDefaultValues,
+ });
+
+ const { fields, append, remove } = useFieldArray({
+ control: form.control,
+ name: "domains" as FieldArrayPath,
+ });
+
+ const {
+ fields: scopeFields,
+ append: appendScope,
+ remove: removeScope,
+ } = useFieldArray({
+ control: form.control,
+ name: "scopes" as FieldArrayPath,
+ });
+
+ const isSubmitting = form.formState.isSubmitting;
+
+ const onSubmit = async (data: OidcProviderForm) => {
+ try {
+ const scopes = data.scopes.filter(Boolean).length
+ ? data.scopes.filter(Boolean)
+ : DEFAULT_SCOPES;
+
+ const isAzure = data.issuer.includes("login.microsoftonline.com");
+ const mapping = isAzure
+ ? {
+ id: "sub",
+ email: "preferred_username",
+ emailVerified: "email_verified",
+ name: "name",
+ }
+ : {
+ id: "sub",
+ email: "email",
+ emailVerified: "email_verified",
+ name: "preferred_username",
+ image: "picture",
+ };
+ await mutateAsync({
+ providerId: data.providerId,
+ issuer: data.issuer,
+ domains: data.domains,
+ oidcConfig: {
+ clientId: data.clientId,
+ clientSecret: data.clientSecret,
+ scopes,
+ pkce: true,
+ mapping,
+ },
+ });
+
+ toast.success("OIDC provider registered successfully");
+ form.reset(formDefaultValues);
+ setOpen(false);
+ await utils.sso.listProviders.invalidate();
+ } catch (err) {
+ toast.error(
+ err instanceof Error ? err.message : "Failed to register SSO provider",
+ );
+ }
+ };
+
+ return (
+
+ {children}
+
+
+ Register OIDC provider
+
+ Add any OIDC-compliant identity provider (e.g. Okta, Azure AD,
+ Google Workspace, Auth0, Keycloak). Discovery will fill endpoints
+ from the issuer URL when possible.
+
+
+
+
+
+
+ );
+}
diff --git a/apps/dokploy/components/proprietary/sso/register-saml-dialog.tsx b/apps/dokploy/components/proprietary/sso/register-saml-dialog.tsx
new file mode 100644
index 000000000..4835eb6b8
--- /dev/null
+++ b/apps/dokploy/components/proprietary/sso/register-saml-dialog.tsx
@@ -0,0 +1,328 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { Plus, Trash2 } from "lucide-react";
+import { useEffect, useState } from "react";
+import { type FieldArrayPath, useFieldArray, useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { z } from "zod";
+import { Button } from "@/components/ui/button";
+import {
+ Dialog,
+ DialogContent,
+ DialogDescription,
+ DialogFooter,
+ DialogHeader,
+ DialogTitle,
+ DialogTrigger,
+} from "@/components/ui/dialog";
+import {
+ Form,
+ FormControl,
+ FormDescription,
+ FormField,
+ FormItem,
+ FormLabel,
+ FormMessage,
+} from "@/components/ui/form";
+import { Input } from "@/components/ui/input";
+import { Textarea } from "@/components/ui/textarea";
+import { api } from "@/utils/api";
+
+const domainsArraySchema = z
+ .array(z.string().trim())
+ .superRefine((arr, ctx) => {
+ const filled = arr.filter((s) => s.length > 0);
+ if (filled.length < 1) {
+ ctx.addIssue({
+ code: z.ZodIssueCode.custom,
+ message: "At least one domain is required",
+ path: [],
+ });
+ }
+ });
+
+const samlProviderSchema = z.object({
+ providerId: z.string().min(1, "Provider ID is required").trim(),
+ issuer: z.string().min(1, "Issuer URL is required").url("Invalid URL").trim(),
+ domains: domainsArraySchema,
+ entryPoint: z
+ .string()
+ .min(1, "IdP SSO URL is required")
+ .url("Invalid URL")
+ .trim(),
+ cert: z.string().min(1, "IdP signing certificate is required"),
+ idpMetadataXml: z.string().optional(),
+});
+
+type SamlProviderForm = z.infer;
+
+interface RegisterSamlDialogProps {
+ children: React.ReactNode;
+}
+
+const formDefaultValues: SamlProviderForm = {
+ providerId: "",
+ issuer: "",
+ domains: [""],
+ entryPoint: "",
+ cert: "",
+ idpMetadataXml: "",
+};
+
+export function RegisterSamlDialog({ children }: RegisterSamlDialogProps) {
+ const utils = api.useUtils();
+ const [open, setOpen] = useState(false);
+ const { mutateAsync, isLoading } = api.sso.register.useMutation();
+
+ const [baseURL, setBaseURL] = useState("");
+
+ useEffect(() => {
+ if (typeof window !== "undefined") {
+ setBaseURL(window.location.origin);
+ }
+ }, []);
+
+ const form = useForm({
+ resolver: zodResolver(samlProviderSchema),
+ defaultValues: formDefaultValues,
+ });
+
+ const { fields, append, remove } = useFieldArray({
+ control: form.control,
+ name: "domains" as FieldArrayPath,
+ });
+
+ const isSubmitting = form.formState.isSubmitting;
+
+ const onSubmit = async (data: SamlProviderForm) => {
+ try {
+ // maybe add the /saml/metadata endpoint to the baseURL
+ const baseURLWithMetadata = `${baseURL}/saml/metadata`;
+ const generateSpMetadata = (providerId: string) => {
+ return `
+
+
+
+ `;
+ };
+
+ await mutateAsync({
+ providerId: data.providerId,
+ issuer: data.issuer,
+ domains: data.domains,
+ samlConfig: {
+ entryPoint: data.entryPoint,
+ cert: data.cert,
+ callbackUrl: `${baseURL}/api/auth/sso/saml2/callback/${data.providerId}`,
+ audience: baseURL,
+ idpMetadata: data.idpMetadataXml?.trim()
+ ? { metadata: data.idpMetadataXml.trim() }
+ : undefined,
+ spMetadata: {
+ metadata: generateSpMetadata(data.providerId),
+ },
+ mapping: {
+ id: "nameID",
+ email: "email",
+ name: "displayName",
+ firstName: "givenName",
+ lastName: "surname",
+ },
+ },
+ });
+
+ toast.success("SAML provider registered successfully");
+ form.reset(formDefaultValues);
+ setOpen(false);
+ await utils.sso.listProviders.invalidate();
+ } catch (err) {
+ toast.error(
+ err instanceof Error ? err.message : "Failed to register SAML provider",
+ );
+ }
+ };
+
+ return (
+
+ {children}
+
+
+ Register SAML provider
+
+ Add a SAML 2.0 identity provider (e.g. Okta SAML, Azure AD SAML,
+ OneLogin). You need the IdP's SSO URL and signing certificate.
+
+
+
+
+
+
+ );
+}
diff --git a/apps/dokploy/components/proprietary/sso/sign-in-with-sso.tsx b/apps/dokploy/components/proprietary/sso/sign-in-with-sso.tsx
new file mode 100644
index 000000000..391329ed3
--- /dev/null
+++ b/apps/dokploy/components/proprietary/sso/sign-in-with-sso.tsx
@@ -0,0 +1,127 @@
+"use client";
+
+import { zodResolver } from "@hookform/resolvers/zod";
+import { Loader2, LogIn } from "lucide-react";
+import { useState } from "react";
+import { useForm } from "react-hook-form";
+import { toast } from "sonner";
+import { z } from "zod";
+import { Button } from "@/components/ui/button";
+import {
+ Form,
+ FormControl,
+ FormField,
+ FormItem,
+ FormMessage,
+} from "@/components/ui/form";
+import { Input } from "@/components/ui/input";
+import { authClient } from "@/lib/auth-client";
+
+const ssoEmailSchema = z.object({
+ email: z
+ .string()
+ .min(1, "Enter your work email")
+ .email("Enter a valid email address")
+ .transform((v) => v.trim()),
+});
+
+type SSOEmailForm = z.infer;
+
+interface SignInWithSSOProps {
+ /** Content shown when SSO is collapsed (e.g. email/password form) */
+ children: React.ReactNode;
+}
+
+export function SignInWithSSO({ children }: SignInWithSSOProps) {
+ const [expanded, setExpanded] = useState(false);
+
+ const form = useForm({
+ resolver: zodResolver(ssoEmailSchema),
+ defaultValues: { email: "" },
+ });
+
+ const onSubmit = async (values: SSOEmailForm) => {
+ try {
+ const { data, error } = await authClient.signIn.sso({
+ email: values.email,
+ callbackURL: "/dashboard/projects",
+ });
+ if (error) {
+ toast.error(error.message ?? "Failed to sign in with SSO");
+ return;
+ }
+ if (data?.url) {
+ window.location.href = data.url;
+ }
+ } catch (err) {
+ toast.error(
+ err instanceof Error ? err.message : "Failed to sign in with SSO",
+ );
+ }
+ };
+
+ if (!expanded) {
+ return (
+
+ setExpanded(true)}
+ >
+
+ {children}
+
+ );
+ }
+
+ return (
+
+ );
+}
diff --git a/apps/dokploy/components/proprietary/sso/sso-settings.tsx b/apps/dokploy/components/proprietary/sso/sso-settings.tsx
new file mode 100644
index 000000000..830745e01
--- /dev/null
+++ b/apps/dokploy/components/proprietary/sso/sso-settings.tsx
@@ -0,0 +1,371 @@
+"use client";
+
+import { Eye, Loader2, LogIn, Trash2 } from "lucide-react";
+import { useEffect, useState } from "react";
+import { toast } from "sonner";
+import { DialogAction } from "@/components/shared/dialog-action";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import {
+ Card,
+ CardContent,
+ CardDescription,
+ CardHeader,
+ CardTitle,
+} from "@/components/ui/card";
+import {
+ Dialog,
+ DialogContent,
+ DialogDescription,
+ DialogFooter,
+ DialogHeader,
+ DialogTitle,
+} from "@/components/ui/dialog";
+import { api } from "@/utils/api";
+import { RegisterOidcDialog } from "./register-oidc-dialog";
+import { RegisterSamlDialog } from "./register-saml-dialog";
+
+type ProviderForDetails = {
+ id: string | null;
+ providerId: string;
+ issuer: string;
+ domain: string;
+ oidcConfig: string | null;
+ samlConfig: string | null;
+ organizationId: string | null;
+};
+
+function parseOidcConfig(config: string | null): {
+ clientId?: string;
+ scopes?: string[];
+} | null {
+ if (!config) return null;
+ try {
+ const parsed = JSON.parse(config) as {
+ clientId?: string;
+ scopes?: string[];
+ };
+ return { clientId: parsed.clientId, scopes: parsed.scopes };
+ } catch {
+ return null;
+ }
+}
+
+function parseSamlConfig(
+ config: string | null,
+): { entryPoint?: string } | null {
+ if (!config) return null;
+ try {
+ const parsed = JSON.parse(config) as { entryPoint?: string };
+ return { entryPoint: parsed.entryPoint };
+ } catch {
+ return null;
+ }
+}
+
+export const SSOSettings = () => {
+ const utils = api.useUtils();
+ const [detailsProvider, setDetailsProvider] =
+ useState(null);
+ const [baseURL, setBaseURL] = useState("");
+
+ useEffect(() => {
+ if (typeof window !== "undefined") {
+ setBaseURL(window.location.origin);
+ }
+ }, []);
+
+ const { data: providers, isLoading } = api.sso.listProviders.useQuery();
+ const { mutateAsync: deleteProvider, isLoading: isDeleting } =
+ api.sso.deleteProvider.useMutation();
+
+ return (
+
+
+
+ Single Sign-On (SSO)
+
+
+ Configure OIDC or SAML identity providers for enterprise sign-in.
+ Users can sign in with their organization's IdP.
+
+
+
+ {isLoading ? (
+
+
+ Loading providers...
+
+
+ ) : (
+ <>
+ {providers && providers.length > 0 && (
+
+
+
+
+
+
+
+
+
+
+ )}
+
+ {providers && providers.length > 0 ? (
+
+
Registered providers
+
+ {providers.map((provider) => {
+ const isOidc = !!provider.oidcConfig;
+ const isSaml = !!provider.samlConfig;
+
+ return (
+
+
+
+
+
+ {provider.providerId}
+
+
+ {provider.issuer}
+
+
+
+ {provider.domain}
+
+ {isOidc && (
+
+ OIDC
+
+ )}
+ {isSaml && (
+
+ SAML
+
+ )}
+
+
+
+
+
+ setDetailsProvider({
+ id: provider.id,
+ providerId: provider.providerId,
+ issuer: provider.issuer,
+ domain: provider.domain,
+ oidcConfig: provider.oidcConfig,
+ samlConfig: provider.samlConfig,
+ organizationId: provider.organizationId,
+ })
+ }
+ >
+
+ {
+ try {
+ await deleteProvider({
+ providerId: provider.providerId,
+ });
+ toast.success("Provider removed");
+ await utils.sso.listProviders.invalidate();
+ } catch (err) {
+ toast.error(
+ err instanceof Error
+ ? err.message
+ : "Failed to remove provider",
+ );
+ }
+ }}
+ >
+
+
+
+
+
+ );
+ })}
+
+
+ ) : (
+
+
+
+
+
+
No SSO providers
+
+ Add an OIDC or SAML provider so users can sign in with their
+ organization's IdP (e.g. Okta, Azure AD).
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ )}
+
+ )}
+
+
!open && setDetailsProvider(null)}
+ >
+
+ {detailsProvider && (
+ <>
+
+ SSO provider details
+
+ View-only. To change settings, remove this provider and add it
+ again with the new values.
+
+
+
+
+
+ Provider ID
+
+
+ {detailsProvider.providerId}
+
+
+
+
+ Issuer URL
+
+
+ {detailsProvider.issuer}
+
+
+
+
+ Domain
+
+
+ {detailsProvider.domain}
+
+
+ {detailsProvider.oidcConfig && (
+ <>
+ {(() => {
+ const oidc = parseOidcConfig(detailsProvider.oidcConfig);
+ if (!oidc) return null;
+ return (
+ <>
+ {oidc.clientId && (
+
+
+ Client ID
+
+
+ {oidc.clientId}
+
+
+ )}
+ {oidc.scopes && oidc.scopes.length > 0 && (
+
+
+ Scopes
+
+
+ {oidc.scopes.join(" ")}
+
+
+ )}
+
+ );
+ })()}
+
+ )}
+ {detailsProvider.samlConfig && (
+ <>
+ {(() => {
+ const saml = parseSamlConfig(detailsProvider.samlConfig);
+ if (!saml?.entryPoint) return null;
+ return (
+
+
+ Entry point
+
+
+ {saml.entryPoint}
+
+
+ );
+ })()}
+
+ )}
+
+
+ Callback URL (configure in your IdP)
+
+
+ {baseURL || "{baseURL}"}
+ {detailsProvider.samlConfig
+ ? "/api/auth/sso/saml2/callback/"
+ : "/api/auth/sso/callback/"}
+ {detailsProvider.providerId}
+
+ {!baseURL && (
+
+ Replace {"{baseURL}"} with your Dokploy URL (e.g. https://
+ your-domain.com).
+
+ )}
+
+
+ setDetailsProvider(null)}
+ >
+ Close
+
+
+
+ )}
+
+
+
{page} ;
+};
+
+export async function getServerSideProps(
+ ctx: GetServerSidePropsContext<{ serviceId: string }>,
+) {
+ const { req, res } = ctx;
+ const locale = await getLocale(req.cookies);
+ const { user, session } = await validateRequest(ctx.req);
+ if (!user) {
+ return {
+ redirect: {
+ permanent: true,
+ destination: "/",
+ },
+ };
+ }
+ if (user.role === "member") {
+ return {
+ redirect: {
+ permanent: true,
+ destination: "/dashboard/settings/profile",
+ },
+ };
+ }
+
+ const helpers = createServerSideHelpers({
+ router: appRouter,
+ ctx: {
+ req: req as any,
+ res: res as any,
+ db: null as any,
+ session: session as any,
+ user: user as any,
+ },
+ transformer: superjson,
+ });
+ await helpers.user.get.prefetch();
+
+ return {
+ props: {
+ trpcState: helpers.dehydrate(),
+ ...(await serverSideTranslations(locale, ["settings"])),
+ },
+ };
+}
diff --git a/apps/dokploy/pages/dashboard/settings/sso.tsx b/apps/dokploy/pages/dashboard/settings/sso.tsx
new file mode 100644
index 000000000..164e2c3da
--- /dev/null
+++ b/apps/dokploy/pages/dashboard/settings/sso.tsx
@@ -0,0 +1,84 @@
+import { validateRequest } from "@dokploy/server";
+import { createServerSideHelpers } from "@trpc/react-query/server";
+import type { GetServerSidePropsContext } from "next";
+import type { ReactElement } from "react";
+import superjson from "superjson";
+import { DashboardLayout } from "@/components/layouts/dashboard-layout";
+import { EnterpriseFeatureGate } from "@/components/proprietary/enterprise-feature-gate";
+import { SSOSettings } from "@/components/proprietary/sso/sso-settings";
+import { Card } from "@/components/ui/card";
+import { appRouter } from "@/server/api/root";
+import { getLocale, serverSideTranslations } from "@/utils/i18n";
+
+const Page = () => {
+ return (
+
+ );
+};
+
+export default Page;
+
+Page.getLayout = (page: ReactElement) => {
+ return {page} ;
+};
+
+export async function getServerSideProps(ctx: GetServerSidePropsContext) {
+ const { req, res } = ctx;
+ const locale = await getLocale(req.cookies);
+ const { user, session } = await validateRequest(ctx.req);
+ if (!user) {
+ return {
+ redirect: {
+ permanent: true,
+ destination: "/",
+ },
+ };
+ }
+ if (user.role === "member") {
+ return {
+ redirect: {
+ permanent: true,
+ destination: "/dashboard/settings/profile",
+ },
+ };
+ }
+
+ const helpers = createServerSideHelpers({
+ router: appRouter,
+ ctx: {
+ req: req as any,
+ res: res as any,
+ db: null as any,
+ session: session as any,
+ user: user as any,
+ },
+ transformer: superjson,
+ });
+ await helpers.user.get.prefetch();
+
+ return {
+ props: {
+ trpcState: helpers.dehydrate(),
+ ...(await serverSideTranslations(locale, ["settings"])),
+ },
+ };
+}
diff --git a/apps/dokploy/pages/index.tsx b/apps/dokploy/pages/index.tsx
index 8127b41fd..de4294581 100644
--- a/apps/dokploy/pages/index.tsx
+++ b/apps/dokploy/pages/index.tsx
@@ -10,6 +10,9 @@ import { useForm } from "react-hook-form";
import { toast } from "sonner";
import { z } from "zod";
import { OnboardingLayout } from "@/components/layouts/onboarding-layout";
+import { SignInWithGithub } from "@/components/proprietary/auth/sign-in-with-github";
+import { SignInWithGoogle } from "@/components/proprietary/auth/sign-in-with-google";
+import { SignInWithSSO } from "@/components/proprietary/sso/sign-in-with-sso";
import { AlertBlock } from "@/components/shared/alert-block";
import { Logo } from "@/components/shared/logo";
import { Button } from "@/components/ui/button";
@@ -37,6 +40,7 @@ import {
} from "@/components/ui/input-otp";
import { Label } from "@/components/ui/label";
import { authClient } from "@/lib/auth-client";
+import { api } from "@/utils/api";
const LoginSchema = z.object({
email: z.string().email(),
@@ -54,6 +58,7 @@ interface Props {
}
export default function Home({ IS_CLOUD }: Props) {
const router = useRouter();
+ const { data: showSignInWithSSO } = api.sso.showSignInWithSSO.useQuery();
const [isLoginLoading, setIsLoginLoading] = useState(false);
const [isTwoFactorLoading, setIsTwoFactorLoading] = useState(false);
const [isBackupCodeLoading, setIsBackupCodeLoading] = useState(false);
@@ -62,8 +67,6 @@ export default function Home({ IS_CLOUD }: Props) {
const [twoFactorCode, setTwoFactorCode] = useState("");
const [isBackupCodeModalOpen, setIsBackupCodeModalOpen] = useState(false);
const [backupCode, setBackupCode] = useState("");
- const [isGithubLoading, setIsGithubLoading] = useState(false);
- const [isGoogleLoading, setIsGoogleLoading] = useState(false);
const loginForm = useForm({
resolver: zodResolver(LoginSchema),
defaultValues: {
@@ -161,45 +164,54 @@ export default function Home({ IS_CLOUD }: Props) {
}
};
- const handleGithubSignIn = async () => {
- setIsGithubLoading(true);
- try {
- const { error } = await authClient.signIn.social({
- provider: "github",
- });
+ const loginContent = (
+ <>
+ {IS_CLOUD &&
@@ -221,97 +233,11 @@ export default function Home({ IS_CLOUD }: Props) {
{!isTwoFactor ? (
<>
- {IS_CLOUD && (
-
-
-
- Sign in with GitHub
-
+ {showSignInWithSSO ? (
+ {loginContent}
+ ) : (
+ loginContent
)}
- {IS_CLOUD && (
-
-
-
- Sign in with Google
-
- )}
-
-
) : (
<>
diff --git a/apps/dokploy/pages/register.tsx b/apps/dokploy/pages/register.tsx
index 66f95512a..d41749d4d 100644
--- a/apps/dokploy/pages/register.tsx
+++ b/apps/dokploy/pages/register.tsx
@@ -9,6 +9,8 @@ import { useForm } from "react-hook-form";
import { toast } from "sonner";
import { z } from "zod";
import { OnboardingLayout } from "@/components/layouts/onboarding-layout";
+import { SignInWithGithub } from "@/components/proprietary/auth/sign-in-with-github";
+import { SignInWithGoogle } from "@/components/proprietary/auth/sign-in-with-google";
import { AlertBlock } from "@/components/shared/alert-block";
import { Logo } from "@/components/shared/logo";
import { Button } from "@/components/ui/button";
@@ -152,6 +154,17 @@ const Register = ({ isCloud }: Props) => {
)}
+ {isCloud && (
+
+
+ )}
+ {isCloud && (
+
+ Or register with email
+
+ )}
-
-
-### [Tuple, the premier screen sharing app for developers](https://tuple.app/dokploy)
-[Available for MacOS & Windows](https://tuple.app/dokploy)
| 🎖 Hero Sponsor |
-| [LX Aer](https://www.lxaer.com/?ref=dokploy) | 
| 🎖 Hero Sponsor |
-| [LinkDR](https://linkdr.com/?ref=dokploy) | 
| 🎖 Hero Sponsor |
-| [LambdaTest](https://www.lambdatest.com/?utm_source=dokploy&utm_medium=sponsor) | 
| 🎖 Hero Sponsor |
-| [Awesome Tools](https://awesome.tools/) | 
| 🎖 Hero Sponsor |
-| [Supafort](https://supafort.com/?ref=dokploy) | 
| 🥇 Premium Supporter |
-| [Agentdock](https://agentdock.ai/?ref=dokploy) | 
| 🥇 Premium Supporter |
-| [AmericanCloud](https://americancloud.com/?ref=dokploy) | 
| 🥈 Elite Contributor |
-| [Tolgee](https://tolgee.io/?utm_source=github_dokploy&utm_medium=banner&utm_campaign=dokploy) | 
| 🥈 Elite Contributor |
-| [Cloudblast](https://cloudblast.io/?ref=dokploy) | 
| 🥉 Supporting Member |
-| [Synexa](https://synexa.ai/?ref=dokploy) | 
| 🥉 Supporting Member |
-
-### Community Backers 🤝
-
-#### Organizations:
-
-[Sponsors on Open Collective](https://opencollective.com/dokploy)
-
-#### Individuals:
-
-[](https://opencollective.com/dokploy)
-
### Contributors 🤝
diff --git a/apps/api/package.json b/apps/api/package.json
index 0f4b1044f..ed8269ed0 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -23,7 +23,7 @@
"zod": "^3.25.32"
},
"devDependencies": {
- "@types/node": "^20.17.51",
+ "@types/node": "^20.16.0",
"@types/react": "^18.2.37",
"@types/react-dom": "^18.2.15",
"tsx": "^4.16.2",
diff --git a/apps/dokploy/__test__/server/mechanizeDockerContainer.test.ts b/apps/dokploy/__test__/server/mechanizeDockerContainer.test.ts
index c12a272bc..dcaf59d83 100644
--- a/apps/dokploy/__test__/server/mechanizeDockerContainer.test.ts
+++ b/apps/dokploy/__test__/server/mechanizeDockerContainer.test.ts
@@ -13,11 +13,11 @@ type MockCreateServiceOptions = {
const { inspectMock, getServiceMock, createServiceMock, getRemoteDockerMock } =
vi.hoisted(() => {
- const inspect = vi.fn<[], Promise