sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-10-05 21:19:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add group propagation foundation to embedded idp

Browse Source
This commit is contained in:
braginini
2026-01-11 19:04:22 +01:00
parent 5659e45c93
commit 721e92f026
2 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
idp/dex/provider.go
+8 -5
View File
@@ -792,11 +792,12 @@ func (p *Provider) resolveRedirectURI(redirectURI string) string {
// buildOIDCConnectorConfig creates config for OIDC-based connectors // buildOIDCConnectorConfig creates config for OIDC-based connectors
func buildOIDCConnectorConfig(cfg *ConnectorConfig, redirectURI string) ([]byte, error) { func buildOIDCConnectorConfig(cfg *ConnectorConfig, redirectURI string) ([]byte, error) {
oidcConfig := map[string]interface{}{ oidcConfig := map[string]interface{}{
"issuer": cfg.Issuer, "issuer": cfg.Issuer,
"clientID": cfg.ClientID, "clientID": cfg.ClientID,
"clientSecret": cfg.ClientSecret, "clientSecret": cfg.ClientSecret,
"redirectURI": redirectURI, "redirectURI": redirectURI,
"scopes": []string{"openid", "profile", "email"}, "scopes": []string{"openid", "profile", "email"},
"insecureEnableGroups": true,
} }
switch cfg.Type { switch cfg.Type {
case "zitadel": case "zitadel":
@@ -806,6 +807,8 @@ func buildOIDCConnectorConfig(cfg *ConnectorConfig, redirectURI string) ([]byte,
oidcConfig["claimMapping"] = map[string]string{"email": "preferred_username"} oidcConfig["claimMapping"] = map[string]string{"email": "preferred_username"}
case "okta": case "okta":
oidcConfig["insecureSkipEmailVerified"] = true oidcConfig["insecureSkipEmailVerified"] = true
case "pocketid":
oidcConfig["scopes"] = []string{"openid", "profile", "email", "groups"}
} }
return encodeConnectorConfig(oidcConfig) return encodeConnectorConfig(oidcConfig)
} }
infrastructure_files/getting-started.sh
+1 -1
View File
@@ -270,7 +270,7 @@ AUTH_CLIENT_ID=netbird-dashboard
AUTH_CLIENT_SECRET= AUTH_CLIENT_SECRET=
AUTH_AUTHORITY=$NETBIRD_HTTP_PROTOCOL://$NETBIRD_DOMAIN/oauth2 AUTH_AUTHORITY=$NETBIRD_HTTP_PROTOCOL://$NETBIRD_DOMAIN/oauth2
USE_AUTH0=false USE_AUTH0=false
AUTH_SUPPORTED_SCOPES=openid profile email AUTH_SUPPORTED_SCOPES=openid profile email groups
AUTH_REDIRECT_URI=/nb-auth AUTH_REDIRECT_URI=/nb-auth
AUTH_SILENT_REDIRECT_URI=/nb-silent-auth AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
# SSL # SSL