Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-07 13:19:19 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-openid-connect/lib
History
Exact
Justin Moore 4bb513fccf
 FEATURE: Secretless auth in the OpenID connect plugin (#35606) 
This change allows users to configure Discourse to fetch tokens from a supporting
IdP without the use of secrets as long as PKCE is enabled.

This is the Authorization Code Flow with Proof Key for Code Exchange (PKCE). For more information, see https://auth0.com/docs/get-started/authentication-and-authorization-flow/authorization-code-flow-with-pkce

Example configuration:
```
"DISCOURSE_OPENID_CONNECT_ENABLED": "true",
"DISCOURSE_OPENID_CONNECT_DISCOVERY_DOCUMENT": "https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration",
"DISCOURSE_OPENID_CONNECT_CLIENT_ID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"DISCOURSE_OPENID_CONNECT_CLIENT_SECRET": "",
"DISCOURSE_OPENID_CONNECT_USE_PKCE": "true"
```
2026-01-16 13:27:00 +00:00
..
omniauth_open_id_connect.rb FEATURE: Secretless auth in the OpenID connect plugin (#35606) 2026-01-16 13:27:00 +00:00
openid_connect_authenticator.rb
openid_connect_faraday_formatter.rb