Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-07 13:19:19 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-openid-connect/lib
History
Exact
Chris Alberti 30d8364f0a
 DEV: Support mTLS for OIDC auth (#41524) 
Adds support for mTLS for OIDC auth in the discourse-openid-connect
plugin.

If the SiteSettings `openid_connect_mtls_client_cert` and
`openid_connect_mtls_client_key` are set, then tell OmniAuth to use
auth_scheme `tls_client_auth` and pass the cert and key to the
connection ssl options. OmniAuth will skip sending the client_secret in
favor of the cert.

Optionally, SiteSetting `openid_connect_mtls_client_key_passcode` can be
provided to decrypt the private key.

Related to dev topic t/185887
2026-07-17 15:59:55 -05:00
..
omniauth_open_id_connect.rb FEATURE: Support oidc groups claim from id_token (#40035) 2026-05-14 17:10:48 +01:00
openid_connect_authenticator.rb DEV: Support mTLS for OIDC auth (#41524) 2026-07-17 15:59:55 -05:00
openid_connect_faraday_formatter.rb