mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2025-12-31 12:32:29 +00:00
020fcb9878
This commit adds OpenID Connect (OIDC) provider functionality to tinyauth, allowing it to act as an OIDC identity provider for other applications. Features: - OIDC discovery endpoint at /.well-known/openid-configuration - Authorization endpoint for OAuth 2.0 authorization code flow - Token endpoint for exchanging authorization codes for tokens - ID token generation with JWT signing - JWKS endpoint for public key distribution - Support for PKCE (code challenge/verifier) - Nonce validation for ID tokens - Configurable OIDC clients with redirect URIs, scopes, and grant types Validation: - Docker Compose setup for local testing - OIDC test client (oidc-whoami) with session management - Nginx reverse proxy configuration - DNS server (dnsmasq) for custom domain resolution - Chrome launch script for easy testing Configuration: - OIDC configuration in config.yaml - Example configuration in config.example.yaml - Database migrations for OIDC client storage
13 lines
367 B
SQL
13 lines
367 B
SQL
CREATE TABLE IF NOT EXISTS "oidc_clients" (
|
|
"client_id" TEXT NOT NULL PRIMARY KEY UNIQUE,
|
|
"client_secret" TEXT NOT NULL,
|
|
"client_name" TEXT NOT NULL,
|
|
"redirect_uris" TEXT NOT NULL,
|
|
"grant_types" TEXT NOT NULL,
|
|
"response_types" TEXT NOT NULL,
|
|
"scopes" TEXT NOT NULL,
|
|
"created_at" INTEGER NOT NULL,
|
|
"updated_at" INTEGER NOT NULL
|
|
);
|
|
|