Code

Draft: OIDC native login#660

Code

Open

sandhose wants to merge 58 commits intoelement-hq:masterelement-hq/hydrogen-web:masterfrom sandhose:sandhose/oidc-loginsandhose/hydrogen-web:sandhose/oidc-loginCopy head branch name to clipboard

+1,501-36

Commits

Commits on Feb 17, 2023

• Multi-arch capable Dockerfile

  

  sandhose

  authored and

  hughns

  committed
  a59e4bd

  Copy full SHA for a59e4bd

• Build and push multi-arch Docker images in CI

  

  sandhose

  authored and

  hughns

  committed
  5379b83

  Copy full SHA for 5379b83

• Make the Docker image configurable at runtime

  

  sandhose

  authored and

  hughns

  committed
  24c5879

  Copy full SHA for 24c5879

• Native OIDC login

  

  sandhose

  authored and

  hughns

  committed
  2604e6a

  Copy full SHA for 2604e6a

• Only generate the auth URL and start the login flow on click

  

  sandhose

  authored and

  hughns

  committed
  b9bca9d

  Copy full SHA for b9bca9d

• Generate the OIDC redirect URI from the URLRouter

  Show description for 83684c8
  

  sandhose

  authored and

  hughns

  committed
  83684c8

  Copy full SHA for 83684c8

• Simplify OIDC callback navigation handling

  

  sandhose

  authored and

  hughns

  committed
  2ba8bc3

  Copy full SHA for 2ba8bc3

• Use platform APIs for text encoding and hashing

  

  sandhose

  authored and

  hughns

  committed
  68daf51

  Copy full SHA for 68daf51

• Stop the token refresher when disposing the client

  

  sandhose

  authored and

  hughns

  committed
  dd8cd31

  Copy full SHA for dd8cd31

• Typo.

  

  sandhose

  authored and

  hughns

  committed
  21cf845

  Copy full SHA for 21cf845

• OIDC dynamic client registration

  

  sandhose

  authored and

  hughns

  committed
  46e884b

  Copy full SHA for 46e884b

• Add client_uri, tos_uri and policy_uri client metadata

  

  sandhose

  authored and

  hughns

  committed
  4644004

  Copy full SHA for 4644004

• Make hydrogen generate the device scope

  

  sandhose

  authored and

  hughns

  committed
  8da49df

  Copy full SHA for 8da49df

• Use unstable prefix for MSC2965 issuer discovery

  hughns

  committed
  f976430

  Copy full SHA for f976430

• Rename OIDC login button to Continue

  hughns

  committed
  0a4822c

  Copy full SHA for 0a4822c

• Request urn:matrix:api:* scope for OIDC

  hughns

  committed
  06a2068

  Copy full SHA for 06a2068

• Try to improve error message on no login method available

  hughns

  committed
  f31f57e

  Copy full SHA for f31f57e

• fix: hide OIDC button when not in use

  hughns

  committed
  786a082

  Copy full SHA for 786a082

• Use primary styling for OIDC login button

  hughns

  committed
  7463145

  Copy full SHA for 7463145

• Handle case of OIDC Provider not returning supported_grant_types

  hughns

  committed
  a44f13e

  Copy full SHA for a44f13e

• Handle case of issuer field not ending with /

  hughns

  committed
  36050b1

  Copy full SHA for 36050b1

• Improve error handling for OIDC discovery and registration

  hughns

  committed
  f8dca77

  Copy full SHA for f8dca77

• Ask OP to revoke tokens on logout

  hughns

  committed
  485e8a2

  Copy full SHA for 485e8a2

• Support statically configured OIDC clients

  hughns

  committed
  1ea9eda

  Copy full SHA for 1ea9eda

• Use valid length of code_verifier

  hughns

  committed
  35bb265

  Copy full SHA for 35bb265

• Link out to OIDC account management URL if available

  hughns

  committed
  462b8b6

  Copy full SHA for 462b8b6

• Use unstable OIDC scope names

  hughns

  committed
  7dc30c4

  Copy full SHA for 7dc30c4

• Multi-arch capable Dockerfile

  

  sandhose

  authored and

  hughns

  committed
  6de66f7

  Copy full SHA for 6de66f7

• Use non-root nginx base in Docker image

  

  sandhose

  authored and

  hughns

  committed
  9b159a7

  Copy full SHA for 9b159a7

• Build and push multi-arch Docker images in CI

  

  sandhose

  authored and

  hughns

  committed
  9fd7f25

  Copy full SHA for 9fd7f25

• Update the documentation to reference the published docker image

  

  sandhose

  authored and

  hughns

  committed
  c8bff10

  Copy full SHA for c8bff10

• Make the Docker image configurable at runtime

  

  sandhose

  authored and

  hughns

  committed
  49d1547

  Copy full SHA for 49d1547

• Native OIDC login

  

  sandhose

  authored and

  hughns

  committed
  17875e4

  Copy full SHA for 17875e4

• Only generate the auth URL and start the login flow on click

  

  sandhose

  authored and

  hughns

  committed
  37e9727

  Copy full SHA for 37e9727

• Improve error handling for OIDC discovery and registration

  hughns

  committed
  1ead9bc

  Copy full SHA for 1ead9bc

• Actually make SessionLoadViewModel.logout do something

  hughns

  committed
  f177a94

  Copy full SHA for f177a94

• Fix typing and tests

  

  sandhose

  authored and

  hughns

  committed
  a4c16e5

  Copy full SHA for a4c16e5

• Fix the runtime config template to include the default theme

  

  sandhose

  authored and

  hughns

  committed
  896f2b7

  Copy full SHA for 896f2b7

• Add static client for thirdroom

  hughns

  committed
  9ce9e2d

  Copy full SHA for 9ce9e2d

• Also build Docker images for the OIDC-login branch

  

  sandhose

  authored and

  hughns

  committed
  a2370da

  Copy full SHA for a2370da

• Also publish sha-* tags to GHCR

  

  sandhose

  authored and

  hughns

  committed
  7c40c7c

  Copy full SHA for 7c40c7c

• Manual revert of docker related changes

  hughns

  committed
  b4ff736

  Copy full SHA for b4ff736

• Fix up merge

  hughns

  committed
  13a4299

  Copy full SHA for 13a4299

• Never attempt to encode OIDC segments

  hughns

  committed
  9c52fb9

  Copy full SHA for 9c52fb9

• FIx regression bug

  hughns

  committed
  317d97c

  Copy full SHA for 317d97c

• Put static OIDC client config into config file

  hughns

  committed
  1716a30

  Copy full SHA for 1716a30

• Remove some debug logging

  hughns

  committed
  94352da

  Copy full SHA for 94352da

• Reinstate building of OIDC branch docker images

  hughns

  committed
  f4b1d99

  Copy full SHA for f4b1d99

• Fix incorrect reference to OIDC segment type

  hughns

  committed
  59b06a0

  Copy full SHA for 59b06a0

• Offer guest mode login if advertised by OIDC Provider

  hughns

  committed
  2739572

  Copy full SHA for 2739572

• Show OIDC sign in errors more sensibly

  hughns

  committed
  da86db3

  Copy full SHA for da86db3

• Support sync without filters for guest access

  hughns

  committed
  0aafd55

  Copy full SHA for 0aafd55

• Fix test cases

  hughns

  committed
  6580fcf

  Copy full SHA for 6580fcf

• Store id_token and fix up logout implementation

  hughns

  committed
  7b7557a

  Copy full SHA for 7b7557a

• Account management section design changes

  Show description for 97b8861
  hughns

  committed
  97b8861

  Copy full SHA for 97b8861

• Add missing param

  hughns

  committed
  d6dff1d

  Copy full SHA for d6dff1d

• Revert docker changes to those in master

  hughns

  committed
  6acc0ea

  Copy full SHA for 6acc0ea

• Remove unused code from rebase

  hughns

  committed
  bde85c9

  Copy full SHA for bde85c9