Migrations/bookorbit
1
0
Fork 0
mirror of https://github.com/bookorbit/bookorbit.git synced 2026-11-03 00:11:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

feat(auth): add opt-in private oidc issuer override (#113)

Browse Source 
Allow self-hosted deployments to explicitly trust private/local OIDC issuer hosts while keeping production defaults locked down.

Keep SSRF protections unchanged outside OIDC issuer and discovery validation paths.

Closes #107
This commit is contained in:
neon
2026-05-27 14:26:57 -06:00
committed by GitHub
parent 3a72ece26d
commit 419f634e5c
14 changed files with 170 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/.env.example
+3
View File
@@ -35,6 +35,9 @@ APP_DATA_PATH=../local/data
# OIDC_JWKS_CACHE_TTL_SECS=3600
# OIDC_CLOCK_TOLERANCE_SECS=30
# OIDC_TOKEN_EXCHANGE_TIMEOUT_MS=10000
# Allow OIDC issuer/discovery URLs that resolve to private/local addresses in production.
# Default false. Keep false unless you intentionally trust your private network.
# OIDC_ALLOW_LOCAL_ISSUERS=false
# App URL (used for building password reset links in emails)
APP_URL=http://localhost:5173