mirror of
https://github.com/coder/coder.git
synced 2026-09-24 15:04:27 +08:00
feat: allow configuring OIDC email claim and OIDC auth url parameters (#6867)
This commit: - Allows configuring the OIDC claim Coder uses for email addresses (by default, this is still email) - Allows customising the parameters sent to the upstream identity provider when requesting a token. This is still access_type=offline by default. - Updates documentation related to the above.
This commit is contained in:
@@ -310,6 +310,16 @@ Base URL of a GitHub Enterprise deployment to use for Login with GitHub.
|
||||
|
||||
Whether new users can sign up with OIDC.
|
||||
|
||||
### --oidc-auth-url-params
|
||||
|
||||
| | |
|
||||
| ----------- | ---------------------------------------- |
|
||||
| Type | <code>struct[map[string]string]</code> |
|
||||
| Environment | <code>$CODER_OIDC_AUTH_URL_PARAMS</code> |
|
||||
| Default | <code>{"access_type": "offline"}</code> |
|
||||
|
||||
OIDC auth URL parameters to pass to the upstream provider.
|
||||
|
||||
### --oidc-client-id
|
||||
|
||||
| | |
|
||||
@@ -337,6 +347,16 @@ Client secret to use for Login with OIDC.
|
||||
|
||||
Email domains that clients logging in with OIDC must match.
|
||||
|
||||
### --oidc-email-field
|
||||
|
||||
| | |
|
||||
| ----------- | ------------------------------------ |
|
||||
| Type | <code>string</code> |
|
||||
| Environment | <code>$CODER_OIDC_EMAIL_FIELD</code> |
|
||||
| Default | <code>email</code> |
|
||||
|
||||
OIDC claim field to use as the email.
|
||||
|
||||
### --oidc-group-field
|
||||
|
||||
| | |
|
||||
|
||||
Reference in New Issue
Block a user