local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 60 Pull requests 4 Projects 2 Releases Packages 1 Activity Actions

Docs and .env.example: document OIDC_ONLY

Browse source
This commit is contained in:
Moritz 2026-02-24 15:07:52 +01:00
parent 249fd12db0
commit 2d1d1c62dc
Signed by: moritz
GPG key ID: 1020A035E5DD0824
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.env.example
View file

@ -31,6 +31,10 @@ ASSOCIATION_NAME="Sportsclub XYZ"
# OIDC_ADMIN_GROUP_NAME=admin # OIDC_ADMIN_GROUP_NAME=admin
# OIDC_GROUPS_CLAIM=groups # OIDC_GROUPS_CLAIM=groups
# Optional: Show only OIDC sign-in on login page (hide password form).
# When set to true and OIDC is configured, users see only the Single Sign-On button.
# OIDC_ONLY=true
# Optional: Vereinfacht accounting integration (finance-contacts sync) # Optional: Vereinfacht accounting integration (finance-contacts sync)
# If set, these override values from Settings UI; those fields become read-only. # If set, these override values from Settings UI; those fields become read-only.
# VEREINFACHT_API_URL=https://api.verein.visuel.dev/api/v1 # VEREINFACHT_API_URL=https://api.verein.visuel.dev/api/v1

4
docs/admin-bootstrap-and-oidc-role-sync.md
View file

@ -33,6 +33,10 @@
- `OIDC_GROUPS_CLAIM` – JWT claim name for group list (default "groups"). - `OIDC_GROUPS_CLAIM` – JWT claim name for group list (default "groups").
- Module: Mv.OidcRoleSyncConfig (oidc_admin_group_name/0, oidc_groups_claim/0). - Module: Mv.OidcRoleSyncConfig (oidc_admin_group_name/0, oidc_groups_claim/0).
### Sign-in page (OIDC-only mode)
- `OIDC_ONLY` (or Settings → OIDC → "Only OIDC sign-in") – When set to true/1/yes and OIDC is configured, the sign-in page shows only the Single Sign-On button (password login is hidden). ENV takes precedence over Settings.
### Sync Logic ### Sync Logic
- Mv.OidcRoleSync.apply_admin_role_from_user_info(user, user_info) – If admin group configured, sets user role to Admin or Mitglied based on user_info groups. - Mv.OidcRoleSync.apply_admin_role_from_user_info(user, user_info) – If admin group configured, sets user role to Admin or Mitglied based on user_info groups.