mirror of
https://github.com/we-promise/sure.git
synced 2026-04-07 22:34:47 +00:00
b23711ae0d
* Add configuration and logic for dynamic SSO provider support and stricter JIT account creation - Introduced `config/auth.yml` for centralized auth configuration and documentation. - Added support for multiple SSO providers, including Google, GitHub, and OpenID Connect. - Implemented stricter JIT SSO account creation modes (`create_and_link` vs `link_only`). - Enabled optional restriction of JIT creation by allowed email domains. - Enhanced OmniAuth initializer for dynamic provider setup and better configurability. - Refined login UI to handle local login disabling and emergency super-admin override. - Updated account creation flow to respect JIT mode and domain checks. - Added tests for SSO account creation, login form visibility, and emergency overrides. # Conflicts: # app/controllers/sessions_controller.rb * remove non-translation * Refactor authentication views to use translation keys and update locale files - Extracted hardcoded strings in `oidc_accounts/link.html.erb` and `sessions/new.html.erb` into translation keys for better localization support. - Added missing translations for English and Spanish in `sessions` and `oidc_accounts` locale files. * Enhance OmniAuth provider configuration and refine local login override logic - Updated OmniAuth initializer to support dynamic provider configuration with `name` and scoped parameters for Google and GitHub. - Improved local login logic to enforce stricter handling of super-admin override when local login is disabled. - Added test for invalid super-admin override credentials. * Document Google sign-in configuration for local development and self-hosted environments --------- Co-authored-by: Josh Waldrep <joshua.waldrep5+github@gmail.com>
27 lines
1.0 KiB
Ruby
27 lines
1.0 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
Rails.configuration.x.auth ||= ActiveSupport::OrderedOptions.new
|
|
|
|
begin
|
|
raw_auth_config = Rails.application.config_for(:auth)
|
|
rescue RuntimeError, Errno::ENOENT, Psych::SyntaxError => e
|
|
Rails.logger.warn("Auth config not loaded: #{e.class} - #{e.message}")
|
|
raw_auth_config = {}
|
|
end
|
|
|
|
auth_config = raw_auth_config.deep_symbolize_keys
|
|
|
|
Rails.configuration.x.auth.local_login_enabled = auth_config.dig(:local_login, :enabled)
|
|
Rails.configuration.x.auth.local_admin_override_enabled = auth_config.dig(:local_login, :admin_override_enabled)
|
|
|
|
Rails.configuration.x.auth.jit_mode = auth_config.dig(:jit, :mode) || "create_and_link"
|
|
|
|
raw_domains = auth_config.dig(:jit, :allowed_oidc_domains).to_s
|
|
Rails.configuration.x.auth.allowed_oidc_domains = raw_domains.split(",").map(&:strip).reject(&:empty?)
|
|
|
|
Rails.configuration.x.auth.providers = (auth_config[:providers] || [])
|
|
|
|
# These will be populated by the OmniAuth initializer once providers are
|
|
# successfully registered.
|
|
Rails.configuration.x.auth.sso_providers ||= []
|