[PR #565] [MERGED] Allow more configuration over the OIDC flow #1484

Closed
opened 2025-12-29 02:30:14 +01:00 by adam · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/juanfont/headscale/pull/565
Author: @apognu
Created: 4/30/2022
Status: Merged
Merged: 5/2/2022
Merged by: @kradalby

Base: mainHead: dev/oidc-custom-config


📝 Commits (1)

  • 7cc58af Allow more configuration over the OIDC flow.

📊 Changes

6 files changed (+68 additions, -2 deletions)

View changed files

📝 CHANGELOG.md (+1 -0)
📝 app.go (+4 -0)
📝 cmd/headscale/cli/utils.go (+6 -0)
📝 config-example.yaml (+15 -0)
📝 oidc.go (+32 -2)
📝 utils.go (+10 -0)

📄 Description

Adds knobs to configure three aspects of the OpenID Connect flow:

  • Custom scopes to override the default "openid profile email".
  • Custom parameters to be added to the Authorize Endpoint request.
  • Domain allowlisting for authenticated principals.
  • User allowlisting for authenticated principals.
  • read the CONTRIBUTING guidelines
  • raised a GitHub issue or discussed it on the projects chat beforehand (#561)
  • added unit tests
  • added integration tests
  • updated documentation if needed
  • updated CHANGELOG.md

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/juanfont/headscale/pull/565 **Author:** [@apognu](https://github.com/apognu) **Created:** 4/30/2022 **Status:** ✅ Merged **Merged:** 5/2/2022 **Merged by:** [@kradalby](https://github.com/kradalby) **Base:** `main` ← **Head:** `dev/oidc-custom-config` --- ### 📝 Commits (1) - [`7cc58af`](https://github.com/juanfont/headscale/commit/7cc58af93231631f32e9694d14feadce67b8b2a8) Allow more configuration over the OIDC flow. ### 📊 Changes **6 files changed** (+68 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `CHANGELOG.md` (+1 -0) 📝 `app.go` (+4 -0) 📝 `cmd/headscale/cli/utils.go` (+6 -0) 📝 `config-example.yaml` (+15 -0) 📝 `oidc.go` (+32 -2) 📝 `utils.go` (+10 -0) </details> ### 📄 Description Adds knobs to configure three aspects of the OpenID Connect flow: * Custom scopes to override the default "openid profile email". * Custom parameters to be added to the Authorize Endpoint request. * Domain allowlisting for authenticated principals. * User allowlisting for authenticated principals. <!-- Please tick if the following things apply. You… --> - [x] read the [CONTRIBUTING guidelines](README.md#user-content-contributing) - [x] raised a GitHub issue or discussed it on the projects chat beforehand (#561) - [ ] added unit tests - [ ] added integration tests - [x] updated documentation if needed - [x] updated CHANGELOG.md --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2025-12-29 02:30:14 +01:00
adam closed this issue 2025-12-29 02:30:14 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#1484