Skip to content

Add OpenID Connect (OIDC) provider support - #2616

Open
p-hoffmann wants to merge 7 commits into
devfrom
ph/oidc
Open

Add OpenID Connect (OIDC) provider support#2616
p-hoffmann wants to merge 7 commits into
devfrom
ph/oidc

Conversation

@p-hoffmann

Copy link
Copy Markdown
Member
  • Makes PhysioNet an OIDC provider: discovery, JWKS, authorize/token, OIDC userinfo, RP-initiated end-session, RS256 ID-token signing with rotation overlap, RFC 7662 introspection.
  • Adds oauth.Partner (1:1 with oauth2_provider.Application) plus a Console workflow at /console/partners/... covering create, edit, scopes, redirect URIs, secret rotation, suspend / reactivate / revoke, and a per-partner PKCE toggle.
  • CustomOAuth2Validator enforces the partner lifecycle at /authorize, /token, /introspect, /revoke and applies the per-partner scope allowlist on top of DOT's global SCOPES check.

@p-hoffmann
p-hoffmann marked this pull request as ready for review May 12, 2026 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant