Skip to content

Single Sign-On via OIDC #888

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 35 commits into from
May 5, 2025
Merged

Single Sign-On via OIDC #888

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
95c37c7
add oidc config variables
lovasoa Apr 21, 2025
6f58587
setup a basic middleware
lovasoa Apr 22, 2025
c21f89a
implement an async http client that uses oidc
lovasoa Apr 23, 2025
661c6d6
initialize provider_metadata in OidcService
lovasoa Apr 23, 2025
5e54aab
better error handling in oidc config
lovasoa Apr 23, 2025
845b39b
HTTP client initialization in oidc now follows global config
lovasoa Apr 23, 2025
67d2979
Merge branch 'main' into oidc
lovasoa Apr 25, 2025
d5fd554
oidc: implement redirects
lovasoa Apr 26, 2025
32bda97
improve local oidc configurability
lovasoa Apr 26, 2025
e193fdf
log
lovasoa Apr 26, 2025
ef9dd31
Update warning message in OIDC configuration to clarify how to disabl…
lovasoa Apr 26, 2025
08c97f6
Update OIDC redirect logging to use info level with client ID
lovasoa Apr 26, 2025
5e8b12d
Refactor unauthenticated request handling in OIDC service
lovasoa Apr 26, 2025
d70fac3
Enhance OIDC service with callback handling and token processing
lovasoa Apr 27, 2025
a5cb479
in handle_oidc_callback use service_request.into_response
lovasoa Apr 27, 2025
938f51c
fmt
lovasoa Apr 27, 2025
e305b89
Implement oidc code exchange and token storage
lovasoa Apr 27, 2025
9f22532
validate oidc cookies
lovasoa Apr 27, 2025
8e07bab
OIDC callback: redirect to the auth URL on failure.
lovasoa Apr 27, 2025
9f302d9
oidc use localhost for redirect config instead of 0.0.0.0 by default
lovasoa Apr 27, 2025
5919008
Enhance OIDC provider metadata discovery with improved logging and er…
lovasoa Apr 27, 2025
55bf296
maintain the initial URL during OIDC authentication
lovasoa Apr 27, 2025
92ba450
implement csrf token
lovasoa Apr 28, 2025
1535b4a
update deps
lovasoa Apr 28, 2025
3b500c7
update sso examples
lovasoa Apr 28, 2025
c040cc7
nonce verification
lovasoa Apr 28, 2025
51c08d0
Refactor OIDC logging and improve documentation
lovasoa Apr 29, 2025
249a687
Remove unused app_state field from OidcService struct
lovasoa Apr 29, 2025
5ad010b
Enhance OIDC client error handling and refactor HTTP request types
lovasoa Apr 29, 2025
e18d03f
clippy fixes
lovasoa Apr 29, 2025
7f20cd2
initialize the oidc and http clients only once
lovasoa Apr 29, 2025
d831c1b
functions for accessing user claims from OIDC tokens + documentation
lovasoa May 5, 2025
2a9e967
better sso troubleshooting info
lovasoa May 5, 2025
6c8a565
fmt
lovasoa May 5, 2025
ea93e68
add sso to the changelog
lovasoa May 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
# CHANGELOG.md

## v0.35
- Add support for [single sign-on using OIDC](sql-page.com/sso)
- Allows protecting access to your website using "Sign in with Google/Microsoft/..."
- Fix tooltips not showing on line charts with one or more hidden series
- Update default chart colors and text shadows for better readability with all themes
- Optimize memory layout by boxing large structs. Slightly reduces memory usage.
Expand Down
Loading
Loading