Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-openid-connect
History
Exact
Justin Moore 4bb513fccf
 FEATURE: Secretless auth in the OpenID connect plugin (#35606) 
This change allows users to configure Discourse to fetch tokens from a supporting
IdP without the use of secrets as long as PKCE is enabled.

This is the Authorization Code Flow with Proof Key for Code Exchange (PKCE). For more information, see https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow-with-pkce

Example configuration:
```
"DISCOURSE_OPENID_CONNECT_ENABLED": "true",
"DISCOURSE_OPENID_CONNECT_DISCOVERY_DOCUMENT": "https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration",
"DISCOURSE_OPENID_CONNECT_CLIENT_ID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"DISCOURSE_OPENID_CONNECT_CLIENT_SECRET": "",
"DISCOURSE_OPENID_CONNECT_USE_PKCE": "true"
```
2026-01-16 13:27:00 +00:00
..
assets/javascripts/discourse/initializers UX: add admin sidebar icons for preinstalled plugins (#36764) 2025-12-18 16:39:00 -05:00
config I18N: Update translations (#37101) 2026-01-14 09:39:58 +01:00
lib FEATURE: Secretless auth in the OpenID connect plugin (#35606) 2026-01-16 13:27:00 +00:00
spec UX: Better separate login and authentication settings (#33711) 2025-10-09 15:29:21 -04:00
package.json DEV: Overhaul typechecking configuration (#35794) 2025-11-12 12:54:34 +00:00
plugin.rb UX: add admin sidebar icons for preinstalled plugins (#36764) 2025-12-18 16:39:00 -05:00
README.md
tsconfig.json DEV: Overhaul typechecking configuration (#35794) 2025-11-12 12:54:34 +00:00

README.md

discourse-openid-connect

A plugin to integrate Discourse with an openid-connect login provider

For information and discussion, see https://meta.discourse.org/t/openid-connect-authentication-plugin/103632