11 commits

Author	SHA1	Message	Date
Peter Olds	abbe4ffceb	feat: add groups support for OIDC claims (#41) ... Allow users to specify allowed groups in the env and use it to inspect the claims. This performs a logical AND of users and groups (additive).	2025-01-14 14:15:57 +08:00
yusing	7a7c4be9fa	fix OIDC middleware not working with Authentik	2025-01-14 12:59:48 +08:00
yusing	b44c8586cc	fix tests and callbackURL	2025-01-14 05:29:13 +08:00
yusing	c5e0ac6f38	allow override allowed_user in middleware, fix typos	2025-01-14 04:08:16 +08:00
yusing	9aee310844	auth code cleanup	2025-01-14 04:05:33 +08:00
yusing	bb0ee5d7a9	implement OIDC middleware	2025-01-14 03:53:07 +08:00
yusing	81d96394b9	allow customizing OICD scopes	2025-01-13 08:30:46 +08:00
yusing	76fe5345d8	cleanup code, redirect to auth page when need	2025-01-13 07:15:29 +08:00
yusing	ef277ef57f	fix: docker test and golangci-lint	2025-01-13 05:37:29 +08:00
Peter Olds	9a12dab600	fix: allow oauth_state token to be cross-domain (#40) ... External OIDC providers won’t work with the current setup.	2025-01-13 05:27:06 +08:00
Yuzerion	51f6391ded	feat: Add optional OIDC support (#39) ... This allows the API to trigger an OAuth workflow to create the JWT for authentication. For now the workflow is triggered by manually visiting `/api/login/oidc` on the frontend app until the UI repo is updated to add support. Co-authored-by: Peter Olds <peter@olds.co>	2025-01-13 04:49:46 +08:00