Read OpenID credentials from file (#3244)

* feat: read OpenID credentials from file Signed-off-by: Uwe Jäger <uwe.jaeger@valiton.com> * feat: allow credentials file and secret in config to keep BC Signed-off-by: Uwe Jäger <uwe.jaeger@valiton.com> --------- Signed-off-by: Uwe Jäger <uwe.jaeger@valiton.com>
2026-06-17 12:58:02 +08:00 · 2025-07-09 18:16:49 +02:00
parent 432fde45af
commit 06c1be119c
11 changed files with 144 additions and 32 deletions
@@ -0,0 +1,4 @@
+{
+    "clientid": "client_id",
+    "clientsecret": "client_secret"
+}
@@ -0,0 +1,4 @@
+{
+    "clientid": "client_id",
+    "clientsecret": "client_secret"
+}
@@ -0,0 +1,4 @@
+{
+    "clientid": "client_id",
+    "clientsecret": "client_secret"
+}
@@ -0,0 +1,4 @@
+{
+    "clientid": "client_id",
+    "clientsecret": "client_secret"
+}
@@ -18,28 +18,24 @@
      "openid": {
        "providers": {
          "github": {
-            "clientid": "client_id",
-            "clientsecret": "client_secret",
+            "credentialsFile": "examples/config-openid-github-credentials.json",
            "keypath": "",
            "scopes": ["read:org", "user", "repo"]
          },
          "google": {
+            "credentialsFile": "examples/config-openid-google-credentials.json",
            "issuer": "https://accounts.google.com",
-            "clientid": "client_id",
-            "clientsecret": "client_secret",
            "scopes": ["openid", "email"]
          },
          "gitlab": {
            "issuer": "https://gitlab.com",
-            "clientid": "client_id",
-            "clientsecret": "client_secret",
+            "credentialsFile": "examples/config-openid-gitlab-credentials.json",
            "scopes": ["openid", "read_api", "read_user", "profile", "email"]
          },
          "oidc": {
            "name": "Corporate SSO",
            "issuer": "http://127.0.0.1:5556/dex",
-            "clientid": "client_id",
-            "clientsecret": "client_secret",
+            "credentialsFile": "examples/config-openid-oidc-credentials.json",
            "scopes": ["openid", "user", "email", "groups"]
          }
        }