[PR #1041] [MERGED] Added an OIDC AllowGroups option for authorization. #1836

Closed
opened 2025-12-29 02:31:54 +01:00 by adam · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/juanfont/headscale/pull/1041
Author: @newellz2
Created: 12/5/2022
Status: Merged
Merged: 12/7/2022
Merged by: @kradalby

Base: mainHead: main


📝 Commits (1)

  • 05e62b3 Added an OIDC AllowGroups option for authorization.

📊 Changes

4 files changed (+44 additions, -0 deletions)

View changed files

📝 CHANGELOG.md (+1 -0)
📝 config-example.yaml (+3 -0)
📝 config.go (+2 -0)
📝 oidc.go (+38 -0)

📄 Description

Added an additional OIDC configuration option for a 'groups' claim. The allowed_groups config option is another OIDC authorization option. I tested this with Keycloak by adding a group membership client scope to the OIDC provider.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/juanfont/headscale/pull/1041 **Author:** [@newellz2](https://github.com/newellz2) **Created:** 12/5/2022 **Status:** ✅ Merged **Merged:** 12/7/2022 **Merged by:** [@kradalby](https://github.com/kradalby) **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (1) - [`05e62b3`](https://github.com/juanfont/headscale/commit/05e62b354b32390ed9493146282852bbf2d5eec6) Added an OIDC AllowGroups option for authorization. ### 📊 Changes **4 files changed** (+44 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `CHANGELOG.md` (+1 -0) 📝 `config-example.yaml` (+3 -0) 📝 `config.go` (+2 -0) 📝 `oidc.go` (+38 -0) </details> ### 📄 Description Added an additional OIDC configuration option for a 'groups' claim. The allowed_groups config option is another OIDC authorization option. I tested this with Keycloak by adding a group membership client scope to the OIDC provider. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
adam added the pull-request label 2025-12-29 02:31:54 +01:00
adam closed this issue 2025-12-29 02:31:55 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#1836