feat: use librechat instead of own chat #14

Merged
sharang merged 6 commits from feat/librechat-integration into main 2026-02-24 10:45:41 +00:00
Owner
No description provided.
sharang added 6 commits 2026-02-24 10:45:24 +00:00
feat(chat): replace built-in chat with LibreChat SSO integration
All checks were successful
CI / Format (push) Successful in 26s
CI / Clippy (push) Successful in 3m0s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Deploy (push) Has been skipped
74a225224c
Replaces the custom chat page with an external LibreChat instance that
shares Keycloak SSO for seamless auto-login. Removes Tools and Knowledge
Base pages as these are now handled by LibreChat's built-in capabilities.

- Add LibreChat service to docker-compose with Ollama backend config
- Add Keycloak OIDC client (certifai-librechat) with prompt=none for
  silent SSO
- Create librechat.yaml with CERTifAI branding, Ollama endpoint, and
  custom page title/logo
- Change sidebar Chat link to external URL (opens LibreChat in new tab)
- Remove chat page, tools page, knowledge base page and all related
  components (chat_sidebar, chat_bubble, chat_input_bar, etc.)
- Remove tool_card, file_row components and tool/knowledge models
- Remove chat_stream SSE handler (no longer needed)
- Clean up i18n files: remove chat, tools, knowledge sections
- Dashboard article summarization via Ollama remains intact

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
fix(docker): fix keycloak health check and deprecation warnings
All checks were successful
CI / Format (push) Successful in 3s
CI / Clippy (push) Successful in 2m56s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Deploy (push) Has been skipped
809ca15979
Keycloak 26 image does not include curl, so the health check fails.
Switch to bash TCP check against /realms/master. Also replace deprecated
KEYCLOAK_ADMIN env vars with KC_BOOTSTRAP_ADMIN_USERNAME/PASSWORD, remove
obsolete compose version key, and add start_period for slower machines.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
fix(librechat): correct YAML config format and add required secrets
Some checks failed
CI / Format (push) Successful in 3s
CI / Security Audit (push) Has been cancelled
CI / Tests (push) Has been cancelled
CI / Deploy (push) Has been cancelled
CI / Clippy (push) Has been cancelled
e13afb9d1b
- Fix endpoints config: use `custom` array format (not `ollama` key)
  per LibreChat docs
- Add required JWT_SECRET, JWT_REFRESH_SECRET, CREDS_KEY, CREDS_IV
  environment variables
- Update config version to 1.2.8

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
fix(librechat): remove prompt=none for local dev compatibility
All checks were successful
CI / Format (push) Successful in 2s
CI / Clippy (push) Successful in 2m47s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Deploy (push) Has been skipped
5f3939bb6c
prompt=none causes silent failure when no Keycloak session exists yet.
Standard OIDC flow still provides seamless SSO when the user has an
active Keycloak session from the dashboard.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
feat(librechat): add OIDC HTTP patch and prompt=none for seamless SSO
All checks were successful
CI / Format (push) Successful in 2s
CI / Clippy (push) Successful in 2m45s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Deploy (push) Has been skipped
79e93eac08
Switch to host networking so LibreChat can reach Keycloak on localhost.
Patch openidStrategy.js to allow HTTP OIDC issuers for local dev
(openid-client v6 enforces HTTPS by default). Add support for
OPENID_AUTH_EXTRA_PARAMS env var and set prompt=none for automatic
SSO login when a Keycloak session exists.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
feat(librechat): update config URLs for Coolify production deployment
Some checks failed
CI / Clippy (push) Has been cancelled
CI / Format (pull_request) Has been cancelled
CI / Clippy (pull_request) Has been cancelled
CI / Security Audit (pull_request) Has been cancelled
CI / Tests (pull_request) Has been cancelled
CI / Deploy (pull_request) Has been cancelled
CI / Format (push) Successful in 25s
CI / Security Audit (push) Has been cancelled
CI / Tests (push) Has been cancelled
CI / Deploy (push) Has been cancelled
833320b21e
Update privacy/terms URLs to dash-dev.meghsakha.com and Ollama baseURL
to production endpoint for Coolify deployment.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
sharang merged commit 208450e618 into main 2026-02-24 10:45:41 +00:00
sharang deleted branch feat/librechat-integration 2026-02-24 10:45:42 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/certifai#14