Denis Arnst
|
33bee70a12
|
Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI
- Remove Passport.js wrapper from OIDC auth, use openid-client directly
- Add schema-driven OIDC settings UI (OidcSettingsSchema.js drives form rendering)
- Add group mapping with KeyValueEditor (explicit mapping or legacy direct name match)
- Add scopes configuration (authOpenIDScopes)
- Add verified email enforcement option (authOpenIDRequireVerifiedEmail)
- Fix group claim validation rejecting URN-style claims (#4744)
- Add auto-discover endpoint for OIDC provider configuration
- Store oidcIdToken in sessions table instead of cookie
- Add AuthError class for structured error handling in auth flows
- Migration v2.33.0 adds oidcIdToken column and new settings fields
|
2026-02-05 17:54:59 +01:00 |
|
Vito0912
|
50e2fe7fd2
|
Fix http/https error
|
2025-08-30 17:47:21 +02:00 |
|
advplyr
|
4018be6330
|
Fix oidc auto-register not cleaning up new user on errors #4563
|
2025-08-10 17:26:15 -05:00 |
|
advplyr
|
99a3867ce9
|
Update callback url check
Co-authored-by: Denis Arnst <git@sapd.eu>
|
2025-08-10 17:08:25 -05:00 |
|
advplyr
|
f7b94a4b6d
|
Fix OIDC auto register user #4485
|
2025-07-13 17:04:02 -05:00 |
|
advplyr
|
9c8900560c
|
Seperate out auth strategies, update change password to return error status codes
|
2025-07-07 15:04:40 -05:00 |
|