audiobookshelf/server/auth
Denis Arnst 33bee70a12
Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI
- Remove Passport.js wrapper from OIDC auth, use openid-client directly
- Add schema-driven OIDC settings UI (OidcSettingsSchema.js drives form rendering)
- Add group mapping with KeyValueEditor (explicit mapping or legacy direct name match)
- Add scopes configuration (authOpenIDScopes)
- Add verified email enforcement option (authOpenIDRequireVerifiedEmail)
- Fix group claim validation rejecting URN-style claims (#4744)
- Add auto-discover endpoint for OIDC provider configuration
- Store oidcIdToken in sessions table instead of cookie
- Add AuthError class for structured error handling in auth flows
- Migration v2.33.0 adds oidcIdToken column and new settings fields
2026-02-05 17:54:59 +01:00
..
AuthError.js Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI 2026-02-05 17:54:59 +01:00
LocalAuthStrategy.js Seperate out auth strategies, update change password to return error status codes 2025-07-07 15:04:40 -05:00
OidcAuthStrategy.js Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI 2026-02-05 17:54:59 +01:00
OidcSettingsSchema.js Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI 2026-02-05 17:54:59 +01:00
TokenManager.js Revamp OIDC auth: remove Passport wrapper, add schema-driven settings UI 2026-02-05 17:54:59 +01:00