mirror of
https://github.com/ipnet-mesh/meshcore-hub.git
synced 2026-08-06 17:02:59 +02:00
Louis King
02c0a8f1b7
Replace WEB_ADMIN_ENABLED with full OIDC support using Authlib. Admin access now requires authenticated sessions with IdP-assigned roles instead of an open toggle. - Add authlib and itsdangerous dependencies - Add OIDC settings to WebSettings (13 env vars) - Create web/oidc.py module (OAuth registry, session helpers) - Add /auth/login, /auth/callback, /auth/logout, /auth/user routes - Gate API proxy writes to admin sessions when OIDC enabled - Protect /a/ routes with session check (redirect to login) - Add SessionMiddleware for signed session cookies - Add renderAuthSection navbar component (login/avatar dropdown) - Add 401/403 interceptor in api.js for auto-redirect - Exclude /auth/ from SPA client-side router interception - Render auth section after translations load (fixes raw key display) - Add custom error pages for 500s (standalone HTML, no JS deps) - Update docker-compose.yml to pass OIDC_* env vars to web container - Update .env.example, README, AGENTS.md, upgrading.md, i18n.md - Add auth.* and errors.* i18n keys - Add 200 tests (OIDC, admin, error pages)