Draft: OIDC native login#660

Open

sandhose wants to merge 58 commits into

element-hq:masterfrom

sandhose:sandhose/oidc-login

Commits on Feb 17, 2023

Multi-arch capable Dockerfile

sandhose
authored and
hughns
committed
Build and push multi-arch Docker images in CI

sandhose
authored and
hughns
committed
Make the Docker image configurable at runtime

sandhose
authored and
hughns
committed
Native OIDC login

sandhose
authored and
hughns
committed
Only generate the auth URL and start the login flow on click

sandhose
authored and
hughns
committed
Generate the OIDC redirect URI from the URLRouter

sandhose
authored and
hughns
committed
Simplify OIDC callback navigation handling

sandhose
authored and
hughns
committed
Use platform APIs for text encoding and hashing

sandhose
authored and
hughns
committed
Stop the token refresher when disposing the client

sandhose
authored and
hughns
committed
Typo.

sandhose
authored and
hughns
committed
OIDC dynamic client registration

sandhose
authored and
hughns
committed
Add client_uri, tos_uri and policy_uri client metadata

sandhose
authored and
hughns
committed
Make hydrogen generate the device scope

sandhose
authored and
hughns
committed
Use unstable prefix for MSC2965 issuer discovery
hughns
committed
Rename OIDC login button to Continue
hughns
committed
Request urn:matrix:api:* scope for OIDC
hughns
committed
Try to improve error message on no login method available
hughns
committed
fix: hide OIDC button when not in use
hughns
committed
Use primary styling for OIDC login button
hughns
committed
Handle case of OIDC Provider not returning supported_grant_types
hughns
committed
Handle case of issuer field not ending with /
hughns
committed
Improve error handling for OIDC discovery and registration
hughns
committed
Ask OP to revoke tokens on logout
hughns
committed
Support statically configured OIDC clients
hughns
committed
Use valid length of code_verifier
hughns
committed
Link out to OIDC account management URL if available
hughns
committed
Use unstable OIDC scope names
hughns
committed
Multi-arch capable Dockerfile

sandhose
authored and
hughns
committed
Use non-root nginx base in Docker image

sandhose
authored and
hughns
committed
Build and push multi-arch Docker images in CI

sandhose
authored and
hughns
committed
Update the documentation to reference the published docker image

sandhose
authored and
hughns
committed
Make the Docker image configurable at runtime

sandhose
authored and
hughns
committed
Native OIDC login

sandhose
authored and
hughns
committed
Only generate the auth URL and start the login flow on click

sandhose
authored and
hughns
committed
Improve error handling for OIDC discovery and registration
hughns
committed
Actually make SessionLoadViewModel.logout do something
hughns
committed
Fix typing and tests

sandhose
authored and
hughns
committed
Fix the runtime config template to include the default theme

sandhose
authored and
hughns
committed
Add static client for thirdroom
hughns
committed
Also build Docker images for the OIDC-login branch

sandhose
authored and
hughns
committed
Also publish sha-* tags to GHCR

sandhose
authored and
hughns
committed
Manual revert of docker related changes
hughns
committed
Fix up merge
hughns
committed
Never attempt to encode OIDC segments
hughns
committed
FIx regression bug
hughns
committed
Put static OIDC client config into config file
hughns
committed
Remove some debug logging
hughns
committed
Reinstate building of OIDC branch docker images
hughns
committed
Fix incorrect reference to OIDC segment type
hughns
committed
Offer guest mode login if advertised by OIDC Provider
hughns
committed
Show OIDC sign in errors more sensibly
hughns
committed
Support sync without filters for guest access
hughns
committed
Fix test cases
hughns
committed
Store id_token and fix up logout implementation
hughns
committed
Account management section design changes
hughns
committed
Add missing param
hughns
committed
Revert docker changes to those in master
hughns
committed
Remove unused code from rebase
hughns
committed