6 Commits (e00c7f7d2b29839a86d8fd94e7fe7dfaef054f8b)

Author	SHA1	Message	Date
jyio	ba14a1bea7	OIDC: Support overriding `end_session_endpoint` using environment variable `GRIST_OIDC_IDP_END_SESSION_ENDPOINT` (#802) ... Support overriding `end_session_endpoint` using environment variable `GRIST_OIDC_IDP_END_SESSION_ENDPOINT`	9 months ago
jyio	0fc3f80ff0	Rename endSessionEndpoint flag to skipEndSessionEndpoint (#793)	9 months ago
Florent	1fec674d28	OIDC: ensure that email_veridied is set by default (#765) ... Co-authored-by: Florent FAYOLLE <florent.fayolle@beta.gouv.fr>	10 months ago
Florent	f8c6892643	OIDC allow to configure name and email attrs, and to skipp end session endpoint (#746) ... * support GRIST_OIDC_SP_PROFILE_NAME_ATTR, defaulting to the concatenation of "given_name" + "family_name" or the "name" attribute. * support GRIST_OIDC_SP_PROFILE_EMAIL_ATTR, defaulting to "email". * support GRIST_OIDC_IDP_SKIP_END_SESSION_ENDPOINT: If set to "true", will not attempt to call the IdP's end_session_endpoint. Fail early if the endpoint does not exist, and this variable isn't set. The last part is because some IdPs like Gitlab do not provide end_session_endpoint. In such cases, GRIST_OIDC_IDP_SKIP_END_SESSION_ENDPOINT=true should be set to have the Grist logout button only log out of Grist, and not out of the IdP. --------- Co-authored-by: Florent FAYOLLE <florent.fayolle@beta.gouv.fr>	10 months ago
Florent	e8789e6531	Issue 740 OIDC login redirect (#742) ... * Fix OIDC redirects from team site to personal page after login #740 Also: - compare state in session and state passed through parameters (otherwise the state won't have any effect regarding the security). - delete the session even after an authentication failure * More logs for OIDC #740 --------- Co-authored-by: Florent FAYOLLE <florent.fayolle@beta.gouv.fr>	10 months ago
Florent	a4998b4b21	Add native OIDC support in Grist #707 (#717)	11 months ago