Skip to content

Commit 8f7732b

Browse files
authored
Merge pull request #265 from N5GEH/264-improve-documentation-for-the-oidc-auth-configuration
docs(entirety): add more explaination to OICD_TOKEN_ROLE_PATH
2 parents c19907c + 1f46c3b commit 8f7732b

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

docs/SETTINGS.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -221,8 +221,12 @@ Server admins can create/update projects for any project admin.
221221
> *default:* super_admin
222222
223223
### OIDC_TOKEN_ROLE_PATH
224-
225-
> *description:* Path in ID token that represents user roles. Each level is seperated by a "."; mind the leading ".". Further information on how to include the roles in the token, please, check our [deployment guide](https://github.com/N5GEH/n5geh.tutorials.entirety_step_by_step/blob/main/README.md#configure-oidc-provider-oidc-auth-only).
224+
> description: Specifies the JSONPath expression used to locate the array of user roles within the OIDC ID token. The path starts with `$` to represent the token's root, with each nested level separated by a dot (`.`).
225+
> For the default value, `$.entirety.roles`, the path is structured as follows:
226+
> - `entirety`: A top-level claim object. In our guide, this is named after the OIDC client.
227+
> - `roles`: The field within the entirety object that contains the array of role strings.
228+
>
229+
> Further information on how to include the roles in the token, please, check our [deployment guide](https://github.com/N5GEH/n5geh.tutorials.entirety_step_by_step/blob/main/README.md#configure-oidc-provider-oidc-auth-only).
226230
>
227231
> *default:* $.entirety.roles
228232

0 commit comments

Comments
 (0)