Aram Akhavan 1517041363 fix: fetch user info from OIDC userinfo endpoint (#698) ...

The OIDC client was only extracting claims from the ID token, but many
OIDC providers (like Authelia) don't include all user information in the
ID token. Fields like 'preferred_username' are typically only available
via the userinfo endpoint.

This fix fetches additional user information from the provider's userinfo
endpoint and merges it with the ID token claims, ensuring that all
required user fields are available for user registration and login.

Fixes #697

Signed-off-by: Aram Akhavan <1147328+kaysond@users.noreply.github.com>

2026-05-28 20:48:37 +02:00

..

auth_ldap_sanitize_test.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

auth_ldap.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

auth_oauth.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

auth_oidc.go

fix: fetch user info from OIDC userinfo endpoint (#698)

2026-05-28 20:48:37 +02:00

auth.go

OIDC - support IdP logout (#670)

2026-04-12 13:18:04 +02:00

oauth_common_sanitize_test.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

oauth_common_test.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

oauth_common.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

sanitize_log_test.go

feat: sanitize external identity provider user data (#681)

2026-05-18 22:28:27 +02:00

webauthn.go

feat: allow multiple auth sources per user (#500,#477) (#612)

2026-01-21 22:22:22 +01:00