feat: allow configuring OIDC email claim and OIDC auth url parameters (#6867)

This commit:

- Allows configuring the OIDC claim Coder uses for email addresses (by default, this is still email)
- Allows customising the parameters sent to the upstream identity provider when requesting a token. This is still access_type=offline by default.
- Updates documentation related to the above.
This commit is contained in:
Cian Johnston
2023-03-30 09:36:57 +01:00
committed by GitHub
parent 6981f89cd8
commit 563c3ade06
17 changed files with 379 additions and 22 deletions
+2
View File
@@ -231,9 +231,11 @@ curl -X GET http://coder-server:8080/api/v2/deployment/config \
},
"oidc": {
"allow_signups": true,
"auth_url_params": {},
"client_id": "string",
"client_secret": "string",
"email_domain": ["string"],
"email_field": "string",
"group_mapping": {},
"groups_field": "string",
"icon_url": {
+8
View File
@@ -1798,9 +1798,11 @@ CreateParameterRequest is a structure used to create a new parameter value for a
},
"oidc": {
"allow_signups": true,
"auth_url_params": {},
"client_id": "string",
"client_secret": "string",
"email_domain": ["string"],
"email_field": "string",
"group_mapping": {},
"groups_field": "string",
"icon_url": {
@@ -2144,9 +2146,11 @@ CreateParameterRequest is a structure used to create a new parameter value for a
},
"oidc": {
"allow_signups": true,
"auth_url_params": {},
"client_id": "string",
"client_secret": "string",
"email_domain": ["string"],
"email_field": "string",
"group_mapping": {},
"groups_field": "string",
"icon_url": {
@@ -2808,9 +2812,11 @@ CreateParameterRequest is a structure used to create a new parameter value for a
```json
{
"allow_signups": true,
"auth_url_params": {},
"client_id": "string",
"client_secret": "string",
"email_domain": ["string"],
"email_field": "string",
"group_mapping": {},
"groups_field": "string",
"icon_url": {
@@ -2839,9 +2845,11 @@ CreateParameterRequest is a structure used to create a new parameter value for a
| Name | Type | Required | Restrictions | Description |
| ----------------------- | -------------------------- | -------- | ------------ | ----------- |
| `allow_signups` | boolean | false | | |
| `auth_url_params` | object | false | | |
| `client_id` | string | false | | |
| `client_secret` | string | false | | |
| `email_domain` | array of string | false | | |
| `email_field` | string | false | | |
| `group_mapping` | object | false | | |
| `groups_field` | string | false | | |
| `icon_url` | [clibase.URL](#clibaseurl) | false | | |