83d04dff17
feat(auth): replace .env/godotenv secret handling with config-based secrets
...
Secrets (JWT keys, LDAP sync password, OIDC client id/secret, cross-login
keys) are now configured directly in config.json under the auth section
where they are used. Each secret can still be supplied via its existing
environment variable, which takes precedence over the config value.
The godotenv dependency, the .env file, configs/env-template.txt and the
loadEnvironment() bootstrap step are removed. -init now writes the demo
JWT keys into config.json instead of a .env file.
Closes #283
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
Entire-Checkpoint: 3a7cb814c53f
2026-06-17 12:28:17 +02:00
43807ae12a
feat: Also submit projects array via oidc token
...
Entire-Checkpoint: 2064482d97e1
2026-04-01 13:46:21 +02:00
31a8a11f1b
fix: Always request oidc roles from token
...
Entire-Checkpoint: bfdbffd7aae0
2026-04-01 12:36:37 +02:00
1f04e0a1ce
fix: oidc role extraction
...
Entire-Checkpoint: bbe9ad3cf817
2026-04-01 11:03:19 +02:00
fd9b76c6a7
Security hardening of ldap and oicd auth implementations
2026-02-09 09:12:06 +01:00
f6aa40d927
Migrate from gorilla to chi web framework. add 404 handler
2026-02-07 17:48:12 +01:00
1d4c79c821
Unify JSON attribute naming ot use kebab style case. Cleanup configuration.
2026-01-20 09:47:13 +01:00
2ebab1e2e2
Reformat with gofumpt
2026-01-13 09:50:57 +01:00
8576ae458d
Switch to cc-lib v2
2025-12-24 09:24:18 +01:00
340efd7926
Refactor auth package
...
Fix security issues
Remove redundant code
Add documentation
Add units tests
2025-11-19 16:54:01 +01:00
4fc78bc382
Refactor variable namings and doc comments
2025-09-27 09:27:36 +02:00
0754ba5292
Port configuration to ccConfig scheme
...
Decentralize config validation
Modularize configuration handling
2025-07-07 13:09:12 +02:00
639e1b9c6d
Port to cc-lib. Extend legal header.
2025-06-30 12:06:35 +02:00
Christoph Kluge
01102cb9b0
feat: add updateUserOnLogin config option for oidc, jwt
2024-10-23 16:17:47 +02:00
fb8bbea99d
Remove year in copyright notice
2024-04-11 23:04:30 +02:00
6828c97415
Add central function to persist users on Login
2024-03-28 14:22:23 +01:00
50401e0030
Fix conditional rendering of OIDC button in login
2024-03-28 13:18:25 +01:00
e8fb5a0030
Add OpenID Connect authentication
...
Fixes #236
Template conditional not yet working
Needs more testing
2024-03-28 12:01:13 +01:00
e92e727279
Extend oidc auth provider
2024-03-13 17:09:36 +01:00
f761900a3e
Add initial code for oidc authentication support
2024-03-13 09:37:12 +01:00
