OIDC Support#1746

Open

pranav-super wants to merge 38 commits into

feature/oidc-support

Commits on Feb 12, 2026

Add OIDC authentication support with Arctic library

jmorton
authored and
AaronPlave
committed
Replace PageData.user with reactive userStore across application

jmorton
authored and
AaronPlave
committed
Add server-side rule enforcement infrastructure

jmorton
authored and
AaronPlave
committed
Add E2E tests for OIDC authentication flow

jmorton
authored and
AaronPlave
committed
Update non-OIDC auth routes to use event-based cookie handling

jmorton
authored and
AaronPlave
committed
Fix race condition in OIDC well-known configuration fetch

jmorton
authored and
AaronPlave
committed
Add OIDC nonce parameter for replay attack protection

jmorton
authored and
AaronPlave
committed
Add audience claim validation to JWT verification

jmorton
authored and
AaronPlave
committed
Validate audience only on ID token per OIDC spec

jmorton
authored and
AaronPlave
committed
Fix open redirect vulnerability in back parameter

jmorton
authored and
AaronPlave
committed
Add secure flag to all authentication cookies

jmorton
authored and
AaronPlave
committed
Add SameSite=Lax to all authentication cookies

jmorton
authored and
AaronPlave
committed
Add configurable JWT signing algorithms via OIDC_ALGORITHMS env var

jmorton
authored and
AaronPlave
committed
Remove sensitive data from OIDC logs

jmorton
authored and
AaronPlave
committed
Standardize OIDC logging and fix additional sensitive data leaks

jmorton
authored and
AaronPlave
committed
Add Content Security Policy headers (report-only mode)

jmorton
authored and
AaronPlave
committed
Verify ID token before using as logout hint

jmorton
authored and
AaronPlave
committed
Add configurable JWT claim paths for OIDC

jmorton
authored and
AaronPlave
committed
Use dynamically loaded env vars for OIDC related values set at launch / runtime.

jmorton
authored and
AaronPlave
committed

Commits on Feb 17, 2026

Commits on Feb 18, 2026

Handle expired refresh tokens gracefully instead of infinite retry loop
AaronPlave
committed

Commits on May 12, 2026

Merge remote-tracking branch 'origin/develop' into feature/oidc-support
AaronPlave
committed

Commits on May 13, 2026

Commits on May 28, 2026

Commits on May 29, 2026

Harden OIDC role-switch e2e and refresh stale test comments
AaronPlave
committed

Commits on Jun 8, 2026

Commits on Jun 18, 2026

test fix
AaronPlave
committed

Commits on Jul 1, 2026

add backend-service smoke tests to the OIDC e2e suite
AaronPlave
committed

Commits on Jul 2, 2026

Split OIDC tests into their own runner
AaronPlave
committed