Claude 5a9b6b4b46 Add comprehensive OIDC access control and admin role mapping ...

Implements full OIDC configuration UI and backend support for access control and admin permissions.

**Access Control Features:**
- Open access (anyone can log in)
- Group/claim based access (require specific group membership)
- Allowed list (whitelist specific emails/usernames)
- Admin approval (manual approval required for new users)

**Admin Role Mapping:**
- Automatic admin role assignment based on OIDC claims
- Configurable claim name and value (default: groups claim)
- First user always becomes admin
- Dynamic role updates on each login

**Setup Wizard:**
- Updated OIDCConfigStep with comprehensive OIDC settings
- Access control method selector with conditional fields
- Admin role mapping configuration with examples
- Improved UX with clear sections and helpful descriptions

**Admin Settings:**
- Expanded OIDC section with all new configuration options
- Proper JSON array handling for allowed emails/usernames
- Visual organization matching setup wizard

**Backend:**
- Updated setup complete API to persist new OIDC fields
- Updated OIDC settings API for all new configuration
- Updated settings GET endpoint to return new fields with defaults
- Proper comma-separated to JSON array conversion

**Documentation:**
- Comprehensive OIDC section in auth.md
- Configuration examples and use cases
- Clear distinction between access control and admin roles
- Default values documented

All changes tested and ready for production use.

2026-01-28 11:41:56 -05:00

..

auth.md

Add comprehensive OIDC access control and admin role mapping

2026-01-28 11:41:56 -05:00

config.md

Initial commit

2026-01-28 11:41:24 -05:00

environment.md

Initial commit

2026-01-28 11:41:24 -05:00

jobs.md

Initial commit

2026-01-28 11:41:24 -05:00

scheduler.md

Initial commit

2026-01-28 11:41:24 -05:00