cjw/Oxicloud
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(oidc): deprecate OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN

Browse Source
This commit is contained in:
Edouard Vanbelle
2026-08-03 21:36:49 +02:00
parent ac32595846
commit d065f99952
5 changed files with 45 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
example.env
+11 -3
View File
@@ -550,7 +550,13 @@ OXICLOUD_OIDC_ENABLED=false
# Example: admins,cloud-admins
#OXICLOUD_OIDC_ADMIN_GROUPS=
# Disable password-based login entirely when OIDC is active (default: false)
# DEPRECATED: prefer OXICLOUD_AUTH_METHODS=oidc (with optional
# OXICLOUD_AUTH_POLICIES=auto_redirect_if_standalone_oidc for the
# server-side /login redirect). This flag still works but emits a
# boot warning; removal is planned for the next major release.
#
# Legacy path — disables password-based login entirely when OIDC is
# active (default: false).
#OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN=false
# Display name for the OIDC provider shown in UI (default: SSO)
@@ -744,8 +750,10 @@ OXICLOUD_WOPI_ENABLED=false
# identity provider; magic-link would sidestep any 2FA / step-up the
# IdP enforces.
#
# Legacy alias: `OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN=true` still removes
# `password` from this list. New deployments should prefer this env var.
# DEPRECATED alias: `OXICLOUD_OIDC_DISABLE_PASSWORD_LOGIN=true` still
# removes `password` from this list but emits a boot warning; it will be
# removed in the next major release. New deployments MUST use this
# `OXICLOUD_AUTH_METHODS` env var instead.
#
# Default (when unset): password + magic_link.
#OXICLOUD_AUTH_METHODS=password,magic_link