A generic OpenID Connect implementation - Githubissues

mirego / accent

The first developer-oriented translation tool. True asynchronous flow between translators and your team.

https://www.accent.reviews

BSD 3-Clause "New" or "Revised" License

1.29k stars 97 forks source link

A generic OpenID Connect implementation #413

Closed dynamyc010 closed 8 months ago

dynamyc010 commented 9 months ago

This PR implements OIDC support into Accent. (Resolves #412) It uses DefactoSoftware's ueberauth_oidc library.

It includes 5 new environment variables.

OIDC_CLIENT_ID, the ID of the app.
OIDC_CLIENT_SECRET, the secret of the app.
OIDC_DISCOVERY_URI, the discovery URI of the authentication server.
OIDC_UID_FIELD, the field the user_id is retrieved from. Defaults to sub.
OIDC_SCOPE, the scope of the app. Defaults to openid profile email.

The OIDC strategy library is only launched if OIDC_CLIENT_ID is set, to keep in line with the rest of the checks.

While I haven't checked against other types of authentication strategies, it passes the CI you included.